62 Commits (32594766b701666a8768b48d724cdd63b74ea469)

Author	SHA1	Message	Date
Lukas Sismis	521d1cb8e7	doc: update eBPF compilation instructions ... Ticket: #6599	9 months ago
Lukas Sismis	2a2898053c	dpdk: add interrupt (power-saving) mode ... When the packet load is low, Suricata can run in interrupt mode. This more resembles the classic approach of processing packets - CPU cores run low and only fetch packets on interrupt. Ticket: #5839	1 year ago
Lukas Sismis	ca6f7c2d00	dpdk: rework hugepage hints to use per-numa information ... Previous integration of hugepage analysis only fetched data from /proc/meminfo. However this proved to be often deceiving mainly for providing only global information and not taking into account different hugepage sizes (e.g. 1GB hugepages) and different NUMA nodes. Ticket: #6419	1 year ago
Ralph Eastwood	9865164e75	napatech: update docs to remove hba reference	1 year ago
Lukas Sismis	11c3aa868d	doc: add DPDK Bond PMD docs ... Ticket: #6099	2 years ago
Victor Julien	c0d9b3c078	doc/userguide: spelling	2 years ago
John Dewey	365bec3da6	netmap: Correct LB + Netmap YAML usage ... Corrected the example YAML configuration when using Netmap and LB.	2 years ago
Richard McConnell	b39a4c63fe	doc: document AF_XDP feature	2 years ago
Phil Young	76de981574	napatech: Added comment indicating that hba will be deprecated ... HBA will be deprecated in Suricata 7	4 years ago
Jeff Lucovsky	06f41f608c	doc: Improve grammar, spelling and clarifications ... This commit improves the overall documentation's grammar, spelling, and adds clarifications where needed.	5 years ago
Odin Jenseg	4549505418	doc/userguide: fix outdated xdp info	5 years ago
Jeff Lucovsky	b116a56a32	doc: Correct typos	5 years ago
Jeff Lucovsky	e14447d594	docs/napatech: Correct typo	5 years ago
Phil Young	3fbcacf9a8	napatech: documentation hardware based bypass support ... Napatech hardware bypass support enables Suricata to utilize capabilities of Napatech SmartNICs to selectively bypass flow-based traffic.	5 years ago
Eric Leblond	82eb669205	doc: information about scaling AF_PACKET IPS mode	5 years ago
Eric Leblond	35bc73e4e2	doc: change eBPF directory path	6 years ago
Eric Leblond	cc28d24e9a	doc: install eBPF files in share directory ... Following proposal by Sascha Steinbiss, let's use /usr/share/suricata to store the eBPF files.	6 years ago
Eric Leblond	3cf49ae868	doc: fix English and some typos	6 years ago
Eric Leblond	4be6701836	doc: pointer to bpfctrl ... As bpfctrl is currently the easiest way to manage pinned maps, let's point to it. We will switch doc to suricatacl once support has been added.	6 years ago
Eric Leblond	8f1a7de791	doc: improve doc on compiling with eBPF support	6 years ago
Eric Leblond	f1ab27b7cb	doc: improve XDP cpu redirect documentation	6 years ago
Eric Leblond	6d9ac64f7b	doc: only balance by ip pair ... As there is some issue with defrag, let's recommend to only do IP pair load-balacing for RSS	6 years ago
Eric Leblond	a1d3835b86	doc: document filter.bpf changes ... Also adds some info to explain maps.	6 years ago
Hilko Bengen	36998ab4cd	Add documentation for --with-clang parameter	6 years ago
Eric Leblond	1f151dd8a6	doc: address norg comments on eBPF doc	6 years ago
Eloïse Brocas	8692aac97f	doc: specify config file in ebpf doc ... This patch updates the ebpf-xdp.rst file to specify which configuration file has to be modified.	6 years ago
Eric Leblond	eea3c6b610	doc: info for new bypass counters	6 years ago
Eric Leblond	e3dccb2400	doc: update bypass stats doc	6 years ago
Eric Leblond	8a11581ac8	doc: update ebpf doc following bypass_filter change	6 years ago
Eric Leblond	253c011c70	doc: update for latest xdp_filter.c change	6 years ago
Eric Leblond	567b5ee1bc	af-packet: rename option 'no-percpu-hash'	6 years ago
Eric Leblond	ca50f8852e	doc: improve ebpf doc ... Add example of bypass rules and explain clang dependency.	6 years ago
Eric Leblond	c11eb78141	doc: document netronome hardware bypass usage	6 years ago
Eric Leblond	82c4f5135b	doc: use github mirror to setup libbpf	6 years ago
Eric Leblond	1c4d214cdb	doc: typo fixes on ebpf doc	6 years ago
Eric Leblond	b7560d7547	doc: document externally managed global switch ... This is currently implemented as an exposed map and it seems a good way to do it.	6 years ago
Eric Leblond	b1769d5f8f	util-ebpf: implement pinned maps loading ... Load flow tables at start if asked to.	6 years ago
Eric Leblond	19c0a5edf5	doc: white space and typo fix	6 years ago
Eric Leblond	6d41a0ced0	doc: more eBPF and XDP capabilities	6 years ago
Eric Leblond	315c29a8e6	ebpf: change the logic to avoid ktime usage ... Kernel time is not available (and/or costly) on NIC such as Netronome so we update the logic to detect dead flows based on a lack of update of packets counters. This way, the XDP filter will be usable by network card. This patch also updates the ebpf code to support per CPU and regular mapping. Netronome is not supporting it and the structure is using atomic for counter so the cost of simultaneous update is really low. This patch also updates the xdp_filter to be able to select if the flow table is per CPU on shared. Second option will be used for hardward offload. To deactivate the per cpu hash, you need to set USE_PERCPU_HASH to 0. This patch also adds an new option to af-packet named no-percpu-hash If this option is set to yes then the Flow bypassed manager thread will use one CPU instead of the number of cores. By doing that we are able to handle the case where USE_PERCPU_HASH is unset (so hardware offload for Netronome). This patch also remove aligment indications in the eBPF filter. This was not really needed and it seems it is causing problem with some recent version of LLVM toolchain.	6 years ago
Andreas Herz	30fd80b0ef	doc: convert fancy quotes to straight quotes	6 years ago
Phil Young	6cfc39d7c9	napatech: auto-config documentation update ... Added documentation describing how to configure suricata to automaticly configure sreams and host buffers without using NTPL. I.e. from suricata.yaml.	6 years ago
Victor Julien	517b45ea2d	netmap: switch to nm_* API ... Process multiple packets at nm_dispatch. Use zero copy for workers recv mode. Add configure check netmap check for API 11+ and find netmap api version. Add netmap guide to the userguide.	6 years ago
Pascal Delalande	f2dca46382	doc: fix minor typo	6 years ago
Victor Julien	693a3df031	tls: document encrypt-handling option ... Document in sample yaml and user guide.	7 years ago
Eric Leblond	e2aab10d29	doc: fix typo in ebpf xdp doc	7 years ago
Andreas Herz	2e8678a5ff	docs: replace redmine links and enforce https on oisf urls	7 years ago
Eric Leblond	7da805ffd9	doc: improve eBPF and XDP doc ... Remove reference to `buggy` clang as a workaround has been found in libbpf. Proof read and add information on the structure of eBPF code.	7 years ago
Eric Leblond	8030e3f66b	doc: update documentation ... This patch adds info on kernel requirement for XDP and rework a few things.	7 years ago
Eric Leblond	0e1a4173ff	doc: how to get live info about ebpf behavior	7 years ago