kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rework PPS/BPS logic to improve performance.

Browse Source
This commit is contained in:
Christian Deacon
2024-06-13 19:27:56 -04:00
parent 1f66f7ab4e
commit e213b5c231
2 changed files with 17 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/xdpfw.h
View File

@@ -141,5 +141,5 @@ struct ip_stats
{ {
__u64 pps; __u64 pps;
__u64 bps; __u64 bps;
__u64 tracking; __u64 next_update;
}; };

28
src/xdpfw_kern.c
View File

@@ -199,31 +199,35 @@ int xdp_prog_main(struct xdp_md *ctx)
ip_stats = bpf_map_lookup_elem(&ip_stats_map, &iph->saddr); ip_stats = bpf_map_lookup_elem(&ip_stats_map, &iph->saddr);
} }
__u16 pkt_len = data_end - data;
if (ip_stats) if (ip_stats)
{ {
// Check for reset. // Check for next update.
if ((now - ip_stats->tracking) > NANO_TO_SEC) if (now > ip_stats->next_update)
{ {
ip_stats->pps = 0; ip_stats->pps = 1;
ip_stats->bps = 0; ip_stats->bps = pkt_len;
ip_stats->tracking = now; ip_stats->next_update = now + NANO_TO_SEC;
}
else
{
// Increment PPS and BPS using built-in functions.
__sync_fetch_and_add(&ip_stats->pps, 1);
__sync_fetch_and_add(&ip_stats->bps, pkt_len);
} }
// Increment PPS and BPS using built-in functions.
__sync_fetch_and_add(&ip_stats->pps, 1);
__sync_fetch_and_add(&ip_stats->bps, ctx->data_end - ctx->data);
pps = ip_stats->pps; pps = ip_stats->pps;
bps = ip_stats->bps; bps = ip_stats->bps;
} }
else else
{ {
// Create new entry. // Create new entry.
struct ip_stats new; struct ip_stats new = {0};
new.pps = 1; new.pps = 1;
new.bps = ctx->data_end - ctx->data; new.bps = pkt_len;
new.tracking = now; new.next_update = now + NANO_TO_SEC;
pps = new.pps; pps = new.pps;
bps = new.bps; bps = new.bps;