From: Eric Leblond <eric@regit.org>
Date: Thu, 11 Jan 2018 15:56:18 +0000 (+0100)
Subject: doc: add info about xdp IPS bypass
X-Git-Tag: suricata-4.1.0-beta1~185
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8c7b5cb0889a493c1bd13feb2facf45d14f96b44;p=thirdparty%2Fsuricata.git

doc: add info about xdp IPS bypass
---

diff --git a/doc/userguide/capture-hardware/ebpf-xdp.rst b/doc/userguide/capture-hardware/ebpf-xdp.rst
index 0c1118e7c4..44751f147d 100644
--- a/doc/userguide/capture-hardware/ebpf-xdp.rst
+++ b/doc/userguide/capture-hardware/ebpf-xdp.rst
@@ -242,6 +242,9 @@ also use the ``/etc/suricata/ebpf/xdp_filter.bpf`` (in our example TCP offloadin
     ring-size: 200000
 
 
+XDP bypass is compatible with AF_PACKET IPS mode. Packets from bypassed flows will be send directly 
+from one card to the second card without going by the kernel network stack.
+
 Setup symmetric hashing on the NIC
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~