[Oisf-devel] imporve flow table in workers runmode

[Song liu]

Thank you guys for the replies.

If this new way is done, it will be similar to multi-instance of Suricata as there is no sharing info between workers.
For example, if the customer has 16-core CPU, we start 16 instances of Suricata.
It sounds stupid and there will be maintenance problems, but Snort used this way to compete with Suricata.

Does Suricata encourage users to use multi-instance way in any situation?
Do you have any test to compare performance between multiple-instance and current workers runmode?
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20130403/1c3cee5a/attachment-0002.html>