webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-15 05:22:59 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Increase memory size for the stream engine

Browse Source 
This change also ensures that suricata has a decent number
of streams preallocated to be able to handle any bursts in traffic.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
This commit is contained in:
Michael Tremer
2019-02-28 14:28:22 +00:00
committed by Stefan Schantl
parent ab1444b4f4
commit 0b340f0938
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
config/suricata/suricata.yaml
View File

@@ -627,7 +627,8 @@ flow-timeouts:
# # is used in a rule.
#
stream:
memcap: 64mb
memcap: 256mb
prealloc-sessions: 4k
checksum-validation: yes # reject wrong csums
inline: auto # auto will use inline mode in IPS mode, yes or no set it statically
reassembly:
@@ -636,10 +637,9 @@ stream:
toserver-chunk-size: 2560
toclient-chunk-size: 2560
randomize-chunk-size: yes
#randomize-chunk-range: 10
#raw: yes
#segment-prealloc: 2048
#check-overlap-different-data: true
raw: yes
segment-prealloc: 2048
check-overlap-different-data: true
# Host table:
#