From ce7d0619ce49587ca78456caf467cf25f7cbbc4e Mon Sep 17 00:00:00 2001 From: "holger@eitzenberger.org" Date: Tue, 2 Apr 2013 00:35:39 +0000 Subject: extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter Signed-off-by: Holger Eitzenberger Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_NFQUEUE.man | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'extensions/libxt_NFQUEUE.man') diff --git a/extensions/libxt_NFQUEUE.man b/extensions/libxt_NFQUEUE.man index f11e0c89..7a991291 100644 --- a/extensions/libxt_NFQUEUE.man +++ b/extensions/libxt_NFQUEUE.man @@ -23,3 +23,10 @@ Packets belonging to the same connection are put into the same nfqueue. By default, if no userspace program is listening on an NFQUEUE, then all packets that are to be queued are dropped. When this option is used, the NFQUEUE rule behaves like ACCEPT instead, and the packet will move on to the next table. +.PP +.TP +\fB\-\-queue\-cpu-fanout\fP +Available starting Linux kernel 3.10. When used together with +\fB--queue-balance\fP this will use the CPU ID as an index to map packets to +the queues. The idea is that you can improve performance if there's a queue +per CPU. This requires \fB--queue-balance\fP to be specified. -- cgit v1.2.3