# Question about use queue mode accept

**URL:** <https://forum.suricata.io/t/question-about-use-queue-mode-accept/3916>\
**Category:** Help\
**Tags:** ips, suricata\
**Created:** [September 11, 2023, 3:52pm UTC](https://forum.suricata.io/t/question-about-use-queue-mode-accept/3916 "2023-09-11T15:52:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wcts](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/wcts/32/2354_2.png) [@wcts](https://forum.suricata.io/u/wcts)\
**Post date:** [September 11, 2023, 3:52pm UTC](https://forum.suricata.io/t/question-about-use-queue-mode-accept/3916/1 "2023-09-11T15:52:07Z")

</div>

I’am using Suricata in mode IPS, my intention is use run mode “accept”, directioning traffic via firewall for multi queues, that is, it doesn’t matter which interface the packet enters or leaves

My main question is if need setting really one session “af-packet” by interface in my suricata.yaml?

Other question is about cluster-id, what a problem in using same id for all interfaces?

Info:

- Suricata v6.0.13
- OS: Debian

Thanks

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [September 13, 2023, 9:18pm UTC](https://forum.suricata.io/t/question-about-use-queue-mode-accept/3916/2 "2023-09-13T21:18:44Z")

</div>

Do you want to run the AF\_PACKET IPS mode or do you want to use the netfilter integrated mode with NFQUEUE?

The cluster-id needs to be unique.

Did you read the docs at [15. Setting up IPS/inline for Linux — Suricata 7.0.1-dev documentation](https://docs.suricata.io/en/latest/setting-up-ipsinline-for-linux.html) to see which mode applies to your scenario?