Af xdp fixes 8780 v3 - #16208
Open
Aboussejra wants to merge 5 commits into
Open
Af xdp fixes 8780 v3#16208Aboussejra wants to merge 5 commits into
Aboussejra wants to merge 5 commits into
Conversation
added 5 commits
September 10, 2026 16:48
…ltname used in suricata config WriteLinuxTunables built the sysfs path from the configured interface name. When an altname is used in the config, sysfs only exposes the real netdev name and writing gro_flush_timeout/napi_defer_hard_irqs failed. Resolve the real name via if_indextoname before building the path. Ticket: OISF#8780
The XSK queue id counter was global, so with two capture interfaces the second interface's threads got queue ids continuing after the first interface's, and xsk_socket__create failed for queues that do not exist on that device. Make the counter per interface config and assign ids with a single atomic fetch-and-add at thread init. Ticket: OISF#8780
UMEM size was hardcoded to XSK ring default descriptors * 2 with default frame size. Add umem-frames and frame-size options to the af-xdp section so buffer memory can be tuned per interface. Ticket: OISF#8780
Expose xsk_socket stats in stats.log: capture.afxdp.rx_dropped, rx_invalid_descs, rx_ring_full and fill_ring_empty. Helps diagnose whether kernel drops come from. Ticket: OISF#8780
AF_XDP capture is receive only Ticket: OISF#8780
|
NOTE: This PR may contain new authors. |
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Link to ticket: https://redmine.openinfosecfoundation.org/issues/8780
Describe changes:
Series of fixes for AF_XDP capture mode, tested on suricata 8.0.6 base:
Provide values to any of the below to override the defaults.
link to the pull request in the respective
_BRANCHvariable.SV_REPO=
SV_BRANCH=
SU_REPO=
SU_BRANCH=