[Oisf-devel] imporve flow table in workers runmode
Anoop Saldanha
anoopsaldanha at gmail.com
Wed Apr 3 20:19:44 UTC 2013
On Thu, Apr 4, 2013 at 12:43 AM, Song liu <van20052005 at hotmail.com> wrote:
> Thank you guys for the replies.
>
> If this new way is done, it will be similar to multi-instance of Suricata as
> there is no sharing info between workers.
> For example, if the customer has 16-core CPU, we start 16 instances of
> Suricata.
> It sounds stupid and there will be maintenance problems, but Snort used this
> way to compete with Suricata.
>
> Does Suricata encourage users to use multi-instance way in any situation?
> Do you have any test to compare performance between multiple-instance and
> current workers runmode?
>
There's no multi-instance. We don't start 16 instances. We'd spawn 16 threads.
--
Anoop Saldanha
More information about the Oisf-devel
mailing list