From: Florian Westphal <fw@strlen.de>
Date: Mon, 4 Jun 2012 02:53:54 +0000 (+0000)
Subject: netfilter: NFQUEUE: don't xor src/dst ip address for load distribution
X-Git-Tag: v3.6-rc1~125^2~565^2~6
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1da6dd07989869fa4f8ec1f47d610d12f96eb04d;p=pandora-kernel.git

netfilter: NFQUEUE: don't xor src/dst ip address for load distribution

because reply packets need to go to the same nfqueue, src/dst ip
address were xor'd prior to jhash().

However, this causes bad distribution for some workloads, e.g.
flows a.b.1.{1,n} -> a.b.2.{1,n} all share the same hash value.

Avoid this by hashing both. To get same hash for replies,
first argument is the smaller address.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed