| Florian Westphal | 54fccb1 | 2013-07-12 23:14:27 +0200 | [diff] [blame] | 1 | This target passes the packet to userspace using the |
| 2 | \fBnfnetlink_queue\fP handler. The packet is put into the queue |
| 3 | identified by its 16-bit queue number. Userspace can inspect |
| 4 | and modify the packet if desired. Userspace must then drop or |
| 5 | reinject the packet into the kernel. Please see libnetfilter_queue |
| 6 | for details. |
| Harald Welte | 7bdfca4 | 2005-07-28 15:24:02 +0000 | [diff] [blame] | 7 | .B |
| 8 | nfnetlink_queue |
| Florian Westphal | 54fccb1 | 2013-07-12 23:14:27 +0200 | [diff] [blame] | 9 | was added in Linux 2.6.14. The \fBqueue-balance\fP option was added in Linux 2.6.31, |
| Florian Westphal | 6924b49 | 2011-01-20 11:27:42 +0100 | [diff] [blame] | 10 | \fBqueue-bypass\fP in 2.6.39. |
| Florian Westphal | 4282d89 | 2009-08-20 16:39:05 +0200 | [diff] [blame] | 11 | .TP |
| 12 | \fB\-\-queue\-num\fP \fIvalue\fP |
| 13 | This specifies the QUEUE number to use. Valid queue numbers are 0 to 65535. The default value is 0. |
| 14 | .PP |
| 15 | .TP |
| 16 | \fB\-\-queue\-balance\fP \fIvalue\fP\fB:\fP\fIvalue\fP |
| 17 | This specifies a range of queues to use. Packets are then balanced across the given queues. |
| 18 | This is useful for multicore systems: start multiple instances of the userspace program on |
| 19 | queues x, x+1, .. x+n and use "\-\-queue\-balance \fIx\fP\fB:\fP\fIx+n\fP". |
| 20 | Packets belonging to the same connection are put into the same nfqueue. |
| Florian Westphal | 6924b49 | 2011-01-20 11:27:42 +0100 | [diff] [blame] | 21 | .PP |
| 22 | .TP |
| 23 | \fB\-\-queue\-bypass\fP |
| 24 | By default, if no userspace program is listening on an NFQUEUE, then all packets that are to be queued |
| Florian Westphal | e816ac4 | 2013-04-13 11:52:22 +0200 | [diff] [blame] | 25 | are dropped. When this option is used, the NFQUEUE rule behaves like ACCEPT instead, and the packet |
| 26 | will move on to the next table. |
| holger@eitzenberger.org | ce7d061 | 2013-04-02 00:35:39 +0000 | [diff] [blame] | 27 | .PP |
| 28 | .TP |
| 29 | \fB\-\-queue\-cpu-fanout\fP |
| 30 | Available starting Linux kernel 3.10. When used together with |
| 31 | \fB--queue-balance\fP this will use the CPU ID as an index to map packets to |
| 32 | the queues. The idea is that you can improve performance if there's a queue |
| 33 | per CPU. This requires \fB--queue-balance\fP to be specified. |