diff options
| author | Florian Westphal | 2012-06-04 04:53:54 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2012-06-07 14:58:42 +0200 |
| commit | 1da6dd07989869fa4f8ec1f47d610d12f96eb04d (patch) | |
| tree | cbbd5784e577c7538545f2c11d2320fbd3b543e0 /net/phonet | |
| parent | netfilter: nf_conntrack: add namespace support for cttimeout (diff) | |
| download | kernel-qcow2-linux-1da6dd07989869fa4f8ec1f47d610d12f96eb04d.tar.gz kernel-qcow2-linux-1da6dd07989869fa4f8ec1f47d610d12f96eb04d.tar.xz kernel-qcow2-linux-1da6dd07989869fa4f8ec1f47d610d12f96eb04d.zip | |
netfilter: NFQUEUE: don't xor src/dst ip address for load distribution
because reply packets need to go to the same nfqueue, src/dst ip
address were xor'd prior to jhash().
However, this causes bad distribution for some workloads, e.g.
flows a.b.1.{1,n} -> a.b.2.{1,n} all share the same hash value.
Avoid this by hashing both. To get same hash for replies,
first argument is the smaller address.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/phonet')
0 files changed, 0 insertions, 0 deletions