suricata icon indicating copy to clipboard operation
suricata copied to clipboard

Xdp tunnel 7674 v6.4

Open catenacyber opened this issue 6 months ago • 2 comments

Link to ticket: https://redmine.openinfosecfoundation.org/issues/ https://redmine.openinfosecfoundation.org/issues/7674

Describe changes:

  • on top of https://github.com/OISF/suricata/pull/13302
  • introduces configurable tunnel_id to distinguish same-looking (same 5-tuple) flows encapsulated in different tunnels
  • adds a config option to "skip" the packets that are not part of a tunnel
  • handle xdp bypass of these encapsulated flows
  • use this new tunnel_id as a multi-tenant selector

Provide values to any of the below to override the defaults.

SV_BRANCH=https://github.com/OISF/suricata-verify/pull/2522

https://github.com/OISF/suricata/pull/13323 with needed rebase and nits from review fixed

catenacyber avatar Jun 03 '25 06:06 catenacyber

Codecov Report

Attention: Patch coverage is 58.47176% with 125 lines in your changes missing coverage. Please review.

Project coverage is 83.24%. Comparing base (278a9c3) to head (29bfadd). Report is 213 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #13352      +/-   ##
==========================================
- Coverage   83.42%   83.24%   -0.18%     
==========================================
  Files        1004     1005       +1     
  Lines      273246   275703    +2457     
==========================================
+ Hits       227952   229511    +1559     
- Misses      45294    46192     +898     
Flag Coverage Δ
fuzzcorpus 62.00% <30.76%> (-0.03%) :arrow_down:
livemode 18.72% <10.70%> (-0.26%) :arrow_down:
pcap 45.08% <31.10%> (+0.14%) :arrow_up:
suricata-verify 65.04% <56.72%> (-0.01%) :arrow_down:
unittests 58.69% <18.24%> (-0.53%) :arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

:rocket: New features to boost your workflow:
  • :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

codecov[bot] avatar Jun 03 '25 07:06 codecov[bot]

Information: QA ran without warnings.

Pipeline 26325

suricata-qa avatar Jun 03 '25 09:06 suricata-qa

Rebased in https://github.com/OISF/suricata/pull/13474

catenacyber avatar Jun 18 '25 12:06 catenacyber