12 ms·
For a given value of "zero"; the packets are still copied from NIC buffers and wrapped in sk_buff.
by kzemek 5y ago
For a given value of "zero"; the packets are still copied from NIC buffers and wrapped in sk_buff.
- wmf 5y agoMaybe headers are parsed but my understanding is that the whole packet is not copied.
- gigel82 5y agoIt's a NAT router so needs at minimum to masquerade (change the src/dest IP in the packet headers to match the internal / public). I'd also be running fail2ban or crowdsec for the bare intrusion detection.