]> git.ipfire.org Git - thirdparty/suricata.git/commit
ebpf: implement global switch bypass
authorEric Leblond <eric@regit.org>
Sun, 20 Jan 2019 19:29:46 +0000 (20:29 +0100)
committerVictor Julien <victor@inliniac.net>
Tue, 18 Jun 2019 05:07:02 +0000 (07:07 +0200)
commit4777af213cfbf7d41af2e7a34daead5c6dcf910d
treede32fc54ebd0e94d3b3d8ea12fd0bf763498dd5c
parentd25e8dbfc7fa5a24119bd261de482ba6f7e28cf3
ebpf: implement global switch bypass

Add a switch to allow to bypass all traffic if the switch is on.
Concept is to use a persistant script and pinned maps, so an
external tool can be used to trigger global bypass in case Suricata
is dead.
ebpf/xdp_filter.c