[Oisf-devel] imporve flow table in workers runmode

[Victor Julien]

On 04/03/2013 09:13 PM, Song liu wrote:
> Thank you guys for the replies.
> 
> If this new way is done, it will be similar to multi-instance of
> Suricata as there is no sharing info between workers.

Yes there is. Thresholds and tags are shared.

> For example, if the customer has 16-core CPU, we start 16 instances of
> Suricata.
> It sounds stupid and there will be maintenance problems, but Snort used
> this way to compete with Suricata.
> 
> Does Suricata encourage users to use multi-instance way in any situation?
> Do you have any test to compare performance between multiple-instance
> and current workers runmode?

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------