]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
doc: add info about xdp IPS bypass
authorEric Leblond <eric@regit.org>
Thu, 11 Jan 2018 15:56:18 +0000 (16:56 +0100)
committerEric Leblond <eric@regit.org>
Tue, 6 Feb 2018 15:58:19 +0000 (16:58 +0100)
doc/userguide/capture-hardware/ebpf-xdp.rst

index 0c1118e7c48966b4f902bfe29f7d969482dcca4a..44751f147d816bc1009a49de9c82cdc8d3f5842c 100644 (file)
@@ -242,6 +242,9 @@ also use the ``/etc/suricata/ebpf/xdp_filter.bpf`` (in our example TCP offloadin
     ring-size: 200000
 
 
+XDP bypass is compatible with AF_PACKET IPS mode. Packets from bypassed flows will be send directly 
+from one card to the second card without going by the kernel network stack.
+
 Setup symmetric hashing on the NIC
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~