[Oisf-users] Platform suitability - SPARC vs X86

[Cooper F. Nelson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mark,

This probably isn't the answer you want, but I would recommend using
Linux on x86 hardware.  The reason being that you get the best
performance using a multi-queue NIC, RSS and AF_PACKET+mmap mode as
described in this article:

https://home.regit.org/2012/07/suricata-to-10gbps-and-beyond/

If you are looking at purchasing new hardware, keep in mind that
suricata works great with hyperthreading.

- -Coop

On 11/28/2013 7:59 PM, Mark Ashley wrote:
> Right now I've got two paths of attack:
> 
> One is to switch to an i86 architecture machine. We have spare Sun X4600s
> laying around (8 x 8CPU @ 2.8GHz) and the doubling of MHz plus switching
> from a RISC to CISC will likely give a big boost to the packets-per-second
> processing abilities. I can install Solaris 11 on one and give that a go,
> if management will humour me long enough to allow it. I've also been told
> they might consider a Dell R720 as well.

- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSmCagAAoJEKIFRYQsa8FWu3cIAIWTovDJs6Yr9aONzPaRLs1n
hCIdx6VcHbMyBjru0hi0/Kj+TlXxc6ewZJrt4jDM/au8+JL5m72kkwX5pmx6K7ZS
5sCDM24NgQDggdv8C85jED/rbXXjE5mwW/71RQLNZf+tb7r35dKxa5oCoKD71qls
4d4hAzHKJT8Rmw3PuTZ4c5AoUoc8fl6EeTxec6UXdPzvBhJynjDSB+KqKq7SkHRk
nTWmm7RBlK7sEzs6Y1TBOgH9jZkWba2PI2Ob7DtVP2Iqb0EptluqlbHcu2xlPwbX
7eKyTkgCKY5ZKd+Q5Eu2itNIylJ93n0+YKz2lRsbJ1QklsWe3Q/7Fc3JKZu07h4=
=zUxV
-----END PGP SIGNATURE-----