Thanks for your reply. So with regards to parallelization, I need to use multiple queues, correct? Also, with --queue-balance, will the same (src_ip, dst_ip) pair always map to the same queue? If yes, I can make each queue handler a separate process. thanks, Eugene On Thu, Sep 24, 2015 at 1:48 PM, Florian Westphal <fw@xxxxxxxxx> wrote: > Eugene Strulyov <eugene.strulyov@xxxxxxxxx> wrote: >> When using multiple queues, is it valid to call nfq_open() multiple >> times in the same process? > > Yes. > >> When I do that I get negative numbers for >> peer portid. Is this normal? > >> $ sudo cat /proc/net/netfilter/nfnetlink_queue >> 100 27790 0 2 65531 0 0 0 1 >> 101 -4585 0 2 65531 0 0 0 1 > > The proc formatter in nfnetlink_queue uses %d instead of %u. > It was fixed a few months back. > >> Also, how exactly does --queue-balance work? All packets seem to be >> directed to one particular queue. > > Hash over ipv4/ipv6 source & dst addresses. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html