[Oisf-users] suricata 3.2.0 for 10Gb performance

[Michał Purzyński]

Meh, that's what we do to do in the paper and that's how you activate the
af_packet hash, which is broken in RHEL 7 :(

On Wed, Feb 15, 2017 at 7:07 AM, erik clark <philosnef at gmail.com> wrote:

> Ok, so word back from RH is that hashing is not likely to be in RHEL
> anytime soon. They mentioned this as a possible alternative:
>
> ethtool -K <ingress nic> rxhash off
>
> They mentioned that there would be a performance penalty as the kernel
> will compute hashes for each skb on ingress, bit it is unlikely to be that
> noticeable.
>
> IMO, I think specifying a symmetric hash with -X might be preferential to
> turning rxhash off entirely, when dealing with af_packet in rhel7.
> Suggestions?
>
>
> On Mon, Jan 30, 2017 at 5:11 PM, Michał Purzyński <
> michalpurzynski1 at gmail.com> wrote:
>
>> http://git.kernel.org/cgit/linux/kernel/git/davem/net-next.
>> git/commit/?id=eb70db8756717b90c01ccc765fdefc4dd969fc74
>>
>> The whole thread is here - https://bro-tracker.atlassia
>> n.net/browse/BIT-1575
>>
>>
>> On Mon, Jan 30, 2017 at 4:48 AM, erik clark <philosnef at gmail.com> wrote:
>>
>>> What commit was that Michal? I am being asked which it is.
>>>
>>> On Thu, Jan 26, 2017 at 11:31 AM, Michał Purzyński <
>>> michalpurzynski1 at gmail.com> wrote:
>>>
>>>> How about fixing the hash calculations, a patch that went upstream in
>>>> the late 4.4
>>>>
>>>> > On Jan 26, 2017, at 7:35 AM, erik clark <philosnef at gmail.com> wrote:
>>>> >
>>>> > Cooper, just to followup. RedHat has confirmed that tpacket_v3
>>>> commits are in the 3.10 branch of RHEL7. They report it as being better
>>>> supported in the 4 kernel line, but it is indeed supported though. If you
>>>> are aware of specific commits for tpacket that you would like to see, pass
>>>> them on and we can get them into 7.4 probably.
>>>> > _______________________________________________
>>>> > Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>>>> > Site: http://suricata-ids.org | Support:
>>>> http://suricata-ids.org/support/
>>>> > List: https://lists.openinfosecfoundation.org/mailman/listinfo/ois
>>>> f-users
>>>>
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170215/05265d77/attachment-0002.html>