Florian Westphal 1da6dd0798 netfilter: NFQUEUE: don't xor src/dst ip address for load distribution
because reply packets need to go to the same nfqueue, src/dst ip
address were xor'd prior to jhash().

However, this causes bad distribution for some workloads, e.g.
flows a.b.1.{1,n} -> a.b.2.{1,n} all share the same hash value.

Avoid this by hashing both. To get same hash for replies,
first argument is the smaller address.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2012-06-07 14:58:42 +02:00
..
2012-04-16 21:08:18 +02:00
2012-04-25 19:47:17 -04:00
2012-05-17 04:50:21 -04:00
2012-04-15 12:44:40 -04:00
2012-05-17 18:45:20 -04:00
2012-05-17 04:50:21 -04:00
2012-05-27 01:11:22 -04:00