[Oisf-users] autofp vs workers - updated comparison?

Eric Leblond eric at regit.org
Tue Jul 21 20:59:41 UTC 2015


On Tue, 2015-07-21 at 10:07 -0700, Cooper F. Nelson wrote:
> This is a great idea.  I had wanted something like an extra FIFO for
> spillover in cases like this; but this approach is just as good.
> Is this in the kernel yet?  If so, what revision?

Yes, it has been added in Linux 3.10.

> On 7/20/2015 9:36 AM, Eric Leblond wrote:
> > Yes but this is without considering the great work by some guys at
> > Google ;) They have implemented an option in af_packet called
> > rollover that send the packet to another socket in case of
> > contention. I've proposed a PR implementing that mode in Suricata. 
> > It
> > has shown some dramatic improvement regarding packet loss in 
> > workers
> > mode. I hope Victor will merge that soon and that it will be
> > available in next beta.

Eric Leblond <eric at regit.org>

More information about the Oisf-users mailing list