[Oisf-users] Recommended settings for flow manager/recycler for 1Gbps of traffic

[Brian Keefer]

On May 12, 2015, at 3:33 PM, Peter Manev <petermanev at gmail.com> wrote:

> On Tue, May 12, 2015 at 11:37 PM, Brian Keefer <chort at effu.se> wrote:
>> On May 12, 2015, at 1:44 PM, Peter Manev <petermanev at gmail.com> wrote:
>> 
>> Hello Peter,
>> 
>> Are the number of management threads increased dynamically, based on how many other threads are configured (i.e. if I configure 2 flow managers, does the number of total management threads increase to 4?), or does the number of (flow manager + flow recycler) threads have to be less than the number of management threads?
> 
> No they are not dynamically increased. Actually if you are using the
> latest git and you set up for example -
> 
> flow:
>  memcap: 64mb
>  hash-size: 65536
>  prealloc: 10000
>  emergency-recovery: 30
>  managers: 2 # default to one flow manager
>  recyclers: 2 # default to one flow recycler thread
> 
> That will give you 6 management threads in total - 2 flow manager
> threads, 2 flow recycler threads and you always have 2 additional by
> default  - SCPerfWakeupThread thread and a SCPerfMgmtThread thread = 6
> in total
> 
> -- 
> Regards,
> Peter Manev

OK, that makes sense.

I noticed the recycler thread was consistently near the top of CPU usage, so I added one and it did increase dynamically. I’m using beta4.

--
bk



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20150512/8cb07748/attachment.sig>