webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 19:23:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Enable CPU affinity

Browse Source 
This will tie the detection threads to a certain CPU and
slightly increases throughput on my system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2019-03-26 21:58:01 +00:00
parent 4d093b8105
commit 35cdc506b0
1 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
config/suricata/suricata.yaml
View File

@@ -697,7 +697,7 @@ spm-algo: auto
# Suricata is multi-threaded. Here the threading can be influenced. # Suricata is multi-threaded. Here the threading can be influenced.
threading: threading:
set-cpu-affinity: no set-cpu-affinity: yes
# Tune cpu affinity of threads. Each family of threads can be bound # Tune cpu affinity of threads. Each family of threads can be bound
# on specific CPUs. # on specific CPUs.
# #
@@ -717,18 +717,15 @@ threading:
- worker-cpu-set: - worker-cpu-set:
cpu: [ "all" ] cpu: [ "all" ]
mode: "exclusive" mode: "exclusive"
# Use explicitely 3 threads and don't compute number by using
# detect-thread-ratio variable:
# threads: 3
prio: prio:
low: [ 0 ] low: [ 0 ]
medium: [ "1-2" ] medium: [ "1-2" ]
high: [ 3 ] high: [ 3 ]
default: "medium" default: "medium"
#- verdict-cpu-set: - verdict-cpu-set:
# cpu: [ 0 ] cpu: [ 0 ]
# prio: prio:
# default: "high" default: "high"
# #
# By default Suricata creates one "detect" thread per available CPU/CPU core. # By default Suricata creates one "detect" thread per available CPU/CPU core.
# This setting allows controlling this behaviour. A ratio setting of 2 will # This setting allows controlling this behaviour. A ratio setting of 2 will