kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update help menu.

Browse Source
This commit is contained in:
Christian Deacon
2025-02-26 20:41:42 -05:00
parent 5b3cdb8897
commit 5f60030721
3 changed files with 17 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@@ -107,7 +107,7 @@ Additionally, there are command line overrides for base config options.
| -u, --update-time | `-u 30` | Overrides the config's update time value. |
| -n, --no-stats | `-n 1` | Overrides the config's no stats value. |
| --stats-ps | `--stats-ps 1` | Overrides the config's stats per second value. |
| --stdout-update-time | `--stdout-update-time 500` | Overrides the config's stdout update time value. |
| --stdout-ut | `--stdout-ut 500` | Overrides the config's stdout update time value. |
### Offload Information
Offloading your XDP/BPF program to your system's NIC allows for the fastest packet processing you can achieve due to the NIC dropping the packets with its hardware. However, for one, there are **not** many NIC manufacturers that do support this feature **and** you're limited to the NIC's memory/processing (e.g. your BPF map sizes will be extremely limited). Additionally, there are usually stricter BPF verifier limitations for offloaded BPF programs, but you may try reaching out to the NIC's manufacturer to see if they will give you a special version of their NIC driver raising these limitations (this is what I did with one manufacturer I used).

2
src/loader/utils/cmdline.c
View File

@@ -15,7 +15,7 @@ const struct option opts[] =
{ "update-time", required_argument, NULL, 'u' },
{ "no-stats", required_argument, NULL, 'n' },
{ "stats-ps", required_argument, NULL, 1 },
{ "stdout-update-time", required_argument, NULL, 2 },
{ "stdout-ut", required_argument, NULL, 2 },
{ NULL, 0, NULL, 0 }
};

22
src/loader/utils/helpers.c
View File

@@ -7,13 +7,21 @@
*/
void PrintHelpMenu()
{
fprintf(stdout, "Usage:\n" \
"--config -c => Config file location (default is /etc/xdpfw/xdpfw.conf).\n" \
"--offload -o => Tries to load the XDP program in hardware/offload mode.\n" \
"--skb -s => Force the XDP program to load with SKB mode instead of DRV.\n" \
"--time -t => How long to run the program for in seconds before exiting. 0 or not set = infinite.\n" \
"--list -l => Print config details including filters (this will exit program after done).\n" \
"--help -h => Print help menu.\n");
printf("Usage: xdpfw [OPTIONS]\n\n");
printf(" -c, --config Config file location (default: /etc/xdpfw/xdpfw.conf).\n");
printf(" -o, --offload Load the XDP program in hardware/offload mode.\n");
printf(" -s, --skb Force the XDP program to load with SKB mode instead of DRV.\n");
printf(" -t, --time Duration to run the program (seconds). 0 or unset = infinite.\n");
printf(" -l, --list Print config details including filters (exits after execution).\n");
printf(" -h, --help Show this help message.\n\n");
printf(" -v, --verbose Override config's verbose value.\n");
printf(" --log-file Override config's log file value.\n");
printf(" -i, --interface Override config's interface value.\n");
printf(" -u, --update-time Override config's update time value.\n");
printf(" -n, --no-stats Override config's no stats value.\n");
printf(" --stats-ps Override config's stats per second value.\n");
printf(" --stdout-ut Override config's stdout update time value.\n");
}
/**