summaryrefslogtreecommitdiff
path: root/.gitignore
blob: 01260a418f7c1048255c59e503b4035702eb227f (plain)
1
2
3
nios2sim-ng
*.o
.deps
pe='hidden' name='id' value='a5fedd43d5f6c94c71053a66e4c3d2e35f1731a2'/>
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2013-04-19 04:58:25 +0000
committerPablo Neira Ayuso <pablo@netfilter.org>2013-04-29 20:09:05 +0200
commita5fedd43d5f6c94c71053a66e4c3d2e35f1731a2 (patch)
tree05d4736fcb475aba8b7031f3f41d1954c1255a32 /net/netfilter/nf_queue.c
parent4bd60443cc44c93ff37d483d69674647a0c48e4e (diff)
netfilter: move skb_gso_segment into nfnetlink_queue module
skb_gso_segment is expensive, so it would be nice if we could avoid it in the future. However, userspace needs to be prepared to receive larger-than-mtu-packets (which will also have incorrect l3/l4 checksums), so we cannot simply remove it. The plan is to add a per-queue feature flag that userspace can set when binding the queue. The problem is that in nf_queue, we only have a queue number, not the queue context/configuration settings. This patch should have no impact other than the skb_gso_segment call now being in a function that has access to the queue config data. A new size attribute in nf_queue_entry is needed so nfnetlink_queue can duplicate the entry of the gso skb when segmenting the skb while also copying the route key. The follow up patch adds switch to disable skb_gso_segment when queue config says so. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_queue.c')