Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

BPFire XDP SYNPROXY acceleration under DPDK Pktgen 10Gbits SYN flood attack #9

Open
vincentmli opened this issue Apr 28, 2024 · 1 comment
Open

BPFire XDP SYNPROXY acceleration under DPDK Pktgen 10Gbits SYN flood attack #9

vincentmli opened this issue Apr 28, 2024 · 1 comment
Assignees
@vincentmli

Comments

@vincentmli
Copy link
Owner

vincentmli commented Apr 28, 2024 •
edited
Loading

Test environment

Screen Shot 2024-04-28 at 8 42 38 AM

DPDK Pktgen 10Gb SYN flood attack

Screen Shot 2024-04-28 at 8 48 02 AM

BPFire with XDP SYNPROXY acceleration

throughput

Screen Shot 2024-04-28 at 8 23 57 AM

top CPU

Screen Shot 2024-04-28 at 8 34 32 AM

htop ksoftirqd

Screen Shot 2024-05-01 at 1 33 06 PM

perf top

Screen Shot 2024-04-28 at 8 27 31 AM

red0 interface rx drops

Screen Shot 2024-04-29 at 10 00 35 AM

BPFire iptables SYNPROXY without XDP

throughput

Screen Shot 2024-04-28 at 8 36 50 AM

top CPU

Screen Shot 2024-04-28 at 8 38 26 AM

htop ksoftirqd

Screen Shot 2024-05-01 at 1 30 50 PM

perf top

Screen Shot 2024-04-28 at 8 39 41 AM
@vincentmli vincentmli self-assigned this Apr 28, 2024
@vincentmli
Copy link
Owner Author

NAT port forwarding no iptables SYNPROXY no XDP

throughput

Screen Shot 2024-04-29 at 8 42 15 AM

perf top

Screen Shot 2024-04-29 at 8 45 56 AM

top

Screen Shot 2024-04-29 at 8 47 16 AM

red0 interface rx drops

Screen Shot 2024-04-29 at 8 49 34 AM

vincentmli pushed a commit that referenced this issue Dec 14, 2024
@mtremer
bwm-ng: Update to version 0.6.3
15818f9 
- Update from version 0.6.1-f54b3fa to 0.6.3
- Update of rootfile not required
- Changelog
    0.6.3
	* remove outdated copyright and email
	* Merge pull request #25 from fweimer/patch-1 AC_QEF_C_NORETURN: Include
	  <stdlib.h> for exit
	* Merge pull request #27 from ofalk/master Fix potential write to unallocated
	  memory.
	* Merge pull request #28 from vgropp/#2-fix-csv-bits feat: #2 output bits in csv
	* Merge pull request #29 from vgropp/#2-fix-csv-bits fix(doc): #2 output bits
	  in csv
	* Merge pull request #32 from vgropp/new-netstat-#5 feat: add support for
	  newer (2016+) linux netstat #5
    0.6.2
	* Merge pull request #22 from vgropp/issue-#13 to fix windows build
	* Merge pull request #20 from dreibh/master CSV file output: fix for timestamp
	  inaccuracy and Y-2038 problem
	* Merge pull request #21 from vgropp/travisci add travisci
	* Merge pull request #17 from Himura2la/master Add the started time in "sum" mode
	* Merge pull request #18 from Himura2la/fix-dynamic Fix DYNAMIC and ANSIOUT in
	  config
	* Merge pull request #10 from SoapGentoo/fixes Use `static inline` instead of
	  `inline`
	* Merge pull request #9 from adventureloop/master Always fflush the pipe
	* Merge pull request #7 from samueloph/fsf_address_clean Update FSF address
	* Merge pull request #6 from samueloph/master Fix typos
	* fix nan and inf values on fast refresh (fixes debian bug #532331

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@vincentmli vincentmli

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@vincentmli