[Oisf-users] Sizing Suricata

[Victor Julien]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/22/2012 11:11 AM, Peter Bates wrote:
> 
> Hello all
> 
> I've been reading 
> https://redmine.openinfosecfoundation.org/projects/suricata/wiki/High_Performance_Configuration
>
> 
as a base for a planned upgrade to our existing system.
> 
> We have about 1-2Gbit/sec on a 10G link, Intel ixgbe and will use 
> PF_RING or AF_PACKET.
> 
> I've been looking at the recent AMD 16C CPUs and seeing that you
> can buy a 4-CPU box resulting in 64 cores.
> 
> Are more individual cores preferable to having faster individual
> CPUs?

I guess it depends on the traffic. If you have a few really high
bandwidth flows faster cores may be better than lots of cores. If you
have many relatively low speed flows more cores will help I think.

- -- 
- ---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
- ---------------------------------------------



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/kOwsACgkQiSMBBAuniMc1rwCfWlzeZIs260zf99+agENuA3Mq
1WIAnRnlDN7AsxebDYLZhXASrxqylXQ+
=Gcht
-----END PGP SIGNATURE-----