From 468b81e1959cea1ce22a78386aca14568922076e Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Sun, 8 Oct 2023 10:46:30 +0200 Subject: libnetfiler_queue: add comment wrt. F_GSO flag. Signed-off-by: Florian Westphal --- src/libnetfilter_queue.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/libnetfilter_queue.c b/src/libnetfilter_queue.c index 86d74c2..bf67a19 100644 --- a/src/libnetfilter_queue.c +++ b/src/libnetfilter_queue.c @@ -127,6 +127,9 @@ gcc -g3 -ggdb -Wall -lmnl -lnetfilter_queue -o nf-queue nf-queue.c * (it requires Linux kernel >= 2.6.31). * - consider using fail-open option see nfq_set_queue_flags() (it requires * Linux kernel >= 3.6) + * - make your application offload aware to avoid costly normalization on kernel + * side. See NFQA_CFG_F_GSO flag to nfq_set_queue_flags(). + * Linux kernel >= 3.10. * - increase queue max length with nfq_set_queue_maxlen() to resist to packets * burst */ -- cgit v1.2.3