kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Switch to single LRU maps since we can't reliably read per CPU maps within BPF program.

Browse Source
This commit is contained in:
Christian Deacon
2020-06-04 17:06:50 +00:00
parent d5d3f02317
commit 8faf701446
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/xdpfw_kern.c
View File

@@ -60,7 +60,7 @@ struct bpf_map_def SEC("maps") stats_map =
struct bpf_map_def SEC("maps") ip_stats_map = struct bpf_map_def SEC("maps") ip_stats_map =
{ {
.type = BPF_MAP_TYPE_LRU_PERCPU_HASH, .type = BPF_MAP_TYPE_LRU_HASH,
.key_size = sizeof(uint32_t), .key_size = sizeof(uint32_t),
.value_size = sizeof(struct xdpfw_ip_stats), .value_size = sizeof(struct xdpfw_ip_stats),
.max_entries = MAX_TRACK_IPS .max_entries = MAX_TRACK_IPS
@@ -68,7 +68,7 @@ struct bpf_map_def SEC("maps") ip_stats_map =
struct bpf_map_def SEC("maps") ip_blacklist_map = struct bpf_map_def SEC("maps") ip_blacklist_map =
{ {
.type = BPF_MAP_TYPE_LRU_PERCPU_HASH, .type = BPF_MAP_TYPE_LRU_HASH,
.key_size = sizeof(uint32_t), .key_size = sizeof(uint32_t),
.value_size = sizeof(uint64_t), .value_size = sizeof(uint64_t),
.max_entries = MAX_TRACK_IPS .max_entries = MAX_TRACK_IPS