[Oisf-users] CPU Affinity

[Peter Manev]

On Mon, Apr 18, 2016 at 4:32 PM, Lee Walker <leeewalker at hotmail.com> wrote:
>
>
> ________________________________
> Hello
>
> I've been reading up on CPU affinity settings for Suricata. I have my system
> configured correctly (I think). Would it be possible for someone to suggest


Not sure but have you had a chance to read the docs here -
https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Suricatayaml#Relevant-cpu-affinity-settings-for-IDSIPS-modes
?

> what they would configure with the following spec server?
>
> HP DL380 Gen 9 fitted with 256G RAM
>
> Architecture:          x86_64
> CPU op-mode(s):        32-bit, 64-bit
> Byte Order:            Little Endian
> CPU(s):                40
> On-line CPU(s) list:   0-39
> Thread(s) per core:    2
> Core(s) per socket:    10
> Socket(s):             2
> NUMA node(s):          2
> Vendor ID:             GenuineIntel
> CPU family:            6
> Model:                 63
> Model name:            Intel(R) Xeon(R) CPU E5-2650 v3 @ 2.30GHz
> Stepping:              2
> CPU MHz:               1430.000
> BogoMIPS:              4600.51
> Virtualization:        VT-x
> L1d cache:             32K
> L1i cache:             32K
> L2 cache:              256K
> L3 cache:              25600K
> NUMA node0 CPU(s):     0-9,20-29
> NUMA node1 CPU(s):     10-19,30-39
>
>
> The Intel NIC I'm using is using NUMA node 1 according to
> /sys/class/net/ens5f0/device/numa_node
>
> I'm running Centos 7.1
>
> Any suggestions would be appreciated.
>
> The following is what I currently have in the yaml file
>
>  cpu-affinity:
>    - management-cpu-set:
>        cpu: [ 0 ]  # include only these cpus in affinity settings
>    - receive-cpu-set:
>        cpu: [ 0 ]  # include only these cpus in affinity settings
>    - decode-cpu-set:
>        cpu: [ "3-19" ]
>        mode: "balanced"
>    - stream-cpu-set:
>        cpu: [ "3-19" ]
>    - detect-cpu-set:
>        cpu: [ "3-19" ]
>        mode: "exclusive" # run detect threads in these cpus
>
>
>
>
>
>
> Regards
> Lee
>
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 9-11 in Washington, DC:
> http://oisfevents.net



-- 
Regards,
Peter Manev