[Oisf-devel] Better PF_RING performance with workers run-mode now instead of autofp
Chris Wakelin
c.d.wakelin at reading.ac.uk
Wed Jan 11 17:59:27 UTC 2012
I've been running ac/full with workers for weeks (~4000 rules, 6
threads, 40-80kpps on a port-mirrored 1Gb link; I haven't been given my
10Gb mirror back yet), which seems to work OK; the startup time is quite
long, and we do drop some packets (according to PF_RING's own stats in
/proc/net/pf_ring/*-<dev>.*) from time to time.
Best Wishes,
Chris
On 11/01/12 17:49, Martin Holste wrote:
> Update: ac with auto has even worse performance. Seeing 70-80% loss.
>
> On Wed, Jan 11, 2012 at 11:30 AM, Martin Holste <mcholste at gmail.com> wrote:
>> Ah, interesting. I've been using ac-gfbs, though I used to use ac.
>> Since I run "full," the memory footprint is much smaller with gfbs.
>> We have a ton of RAM, so it's the long startup time that's the biggest
>> issue with memory utilization. I'll flip over to ac with autofp and
>> see if we see any difference.
>>
>> On Wed, Jan 11, 2012 at 1:23 AM, Victor Julien <victor at inliniac.net> wrote:
>>> Are you using ac or ac-gfbs? Anoop has been improving both. I think the
>>> most significant gain would be when using "ac" "single/auto".
--
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
Christopher Wakelin, c.d.wakelin at reading.ac.uk
IT Services Centre, The University of Reading, Tel: +44 (0)118 378 2908
Whiteknights, Reading, RG6 6AF, UK Fax: +44 (0)118 975 3094
More information about the Oisf-devel
mailing list