From 8c7b5cb0889a493c1bd13feb2facf45d14f96b44 Mon Sep 17 00:00:00 2001 From: Eric Leblond Date: Thu, 11 Jan 2018 16:56:18 +0100 Subject: [PATCH] doc: add info about xdp IPS bypass --- doc/userguide/capture-hardware/ebpf-xdp.rst | 3 +++ 1 file changed, 3 insertions(+) diff --git a/doc/userguide/capture-hardware/ebpf-xdp.rst b/doc/userguide/capture-hardware/ebpf-xdp.rst index 0c1118e7c4..44751f147d 100644 --- a/doc/userguide/capture-hardware/ebpf-xdp.rst +++ b/doc/userguide/capture-hardware/ebpf-xdp.rst @@ -242,6 +242,9 @@ also use the ``/etc/suricata/ebpf/xdp_filter.bpf`` (in our example TCP offloadin ring-size: 200000 +XDP bypass is compatible with AF_PACKET IPS mode. Packets from bypassed flows will be send directly +from one card to the second card without going by the kernel network stack. + Setup symmetric hashing on the NIC ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- 2.47.2