Re: NFQUEUE parallelization

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks for your reply.

So with regards to parallelization, I need to use multiple queues, correct?

Also, with --queue-balance, will the same (src_ip, dst_ip) pair always
map to the same queue? If yes, I can make each queue handler a
separate process.

thanks,

Eugene



On Thu, Sep 24, 2015 at 1:48 PM, Florian Westphal <fw@xxxxxxxxx> wrote:
> Eugene Strulyov <eugene.strulyov@xxxxxxxxx> wrote:
>> When using multiple queues, is it valid to call nfq_open() multiple
>> times in the same process?
>
> Yes.
>
>> When I do that I get negative numbers for
>> peer portid. Is this normal?
>
>> $ sudo cat /proc/net/netfilter/nfnetlink_queue
>>   100  27790     0 2 65531     0     0        0  1
>>   101  -4585     0 2 65531     0     0        0  1
>
> The proc formatter in nfnetlink_queue uses %d instead of %u.
> It was fixed a few months back.
>
>> Also, how exactly does --queue-balance work? All packets seem to be
>> directed to one particular queue.
>
> Hash over ipv4/ipv6 source & dst addresses.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux