Re: nfqueue hashing on TCP/UDP port

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thank you Florian. I appreciate your thoughtful reply.

> To keep host-to-host comunication on the same queue, for ftp, sip and
> other highlevel protocols where a logical connection consists of
> multiple tcp/udp flows.

That does make a lot of sense.

> I will add arbitrary hash keying to nft, its currently
> only missing from the frontend.
>
> Will put you in CC when its done.

Thank you!

> With nft this will soon be possible:
>
> queue num jhash ip daddr . tcp sport . tcp dport mod 16
>
> ... which will queue to 0-15.
>
> I don't think we need code changes to the xtables backend.

That amount of flexibility looks wonderful.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux