[Oisf-devel] imporve flow table in workers runmode

Anoop Saldanha anoopsaldanha at gmail.com
Wed Apr 3 20:19:44 UTC 2013


On Thu, Apr 4, 2013 at 12:43 AM, Song liu <van20052005 at hotmail.com> wrote:
> Thank you guys for the replies.
>
> If this new way is done, it will be similar to multi-instance of Suricata as
> there is no sharing info between workers.
> For example, if the customer has 16-core CPU, we start 16 instances of
> Suricata.
> It sounds stupid and there will be maintenance problems, but Snort used this
> way to compete with Suricata.
>
> Does Suricata encourage users to use multi-instance way in any situation?
> Do you have any test to compare performance between multiple-instance and
> current workers runmode?
>

There's no multi-instance.  We don't start 16 instances.  We'd spawn 16 threads.

-- 
Anoop Saldanha



More information about the Oisf-devel mailing list