[Oisf-users] [RFC] af-packet fanout configuration

[Eric Leblond]

Hello,

I'm currently working on af-packet support following the  patches
proposed by David Miller to support multiple threads reading on the same
interface (similar to PF_RING cluster). Basic af-packet support is now
working and I will now add support for this feature called fanout.

I hesitate on the configuration part: PF_RING uses a pfring.threads
variable that is used to set the number of threads. pf_ring has
integrated support of the multi-thread feature but this is not the case
for af-packet. We will then have in fanout mode real suricata managed
threads. Thus this could be useful to manage and tune them via the
thread affinity setup.

I propose the following:
      * af-packet.fanout: activation of fanout/multithread support
      * af-packet.threads: set the number of threads
If set_cpu_affinity is set to yes:
      * cpu_affinity.receive_cpu_set.threads is used to set the number
        of threads
      * if cpu_affinity.receive_cpu_set.threads and af-packet.threads
        disagree a warning is loggued.

What do you think ?

BR,
--
Eric Leblond
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110808/d69f07bc/attachment.sig>