[Oisf-users] Suricata 4.1.2 - Netmap does sw_ring support multi threads ?

Michael Shirk shirkdog.bsd at gmail.com
Mon Feb 4 20:35:45 UTC 2019


I would use the suricata issue on github to state this is not working
for you, so Vincenzo Maffione can comment on it, he is one of the
netmap developers who is keeping things up-to-date on FreeBSD.

On Mon, Feb 4, 2019 at 3:32 PM Özkan KIRIK <ozkan.kirik at gmail.com> wrote:
>
> Hello,
>
> I tried pull request https://github.com/OISF/suricata/pull/3616 .
> But it didn't help to increate number of software rings for ix0+
>
> Any help ?
>
> On Mon, Feb 4, 2019 at 9:21 PM Carlos Lopez <clopmz at outlook.com> wrote:
>>
>> Hi,
>>
>>
>>
>> I need to test it, but maybe you can try https://github.com/OISF/suricata/pull/3616
>>
>>
>>
>> Regards,
>>
>> C. L. Martinez
>>
>>
>>
>> From: Oisf-users <oisf-users-bounces at lists.openinfosecfoundation.org> on behalf of Özkan KIRIK <ozkan.kirik at gmail.com>
>> Date: Monday, 4 February 2019 at 09:42
>> To: "oisf-users at lists.openinfosecfoundation.org" <oisf-users at lists.openinfosecfoundation.org>
>> Subject: [Oisf-users] Suricata 4.1.2 - Netmap does sw_ring support multi threads ?
>>
>>
>>
>> Hello,
>>
>>
>>
>> I'm using suricata 4.1.2 with netmap. I am testing on both FreeBSD 11.2 and FreeBSD 12.
>>
>>
>>
>> My configuration is as below:
>>
>>
>>
>> netmap:
>>
>>   - interface: ix0
>> threads: 8
>>
>> copy-mode: ips
>>
>> copy-iface: ix0+
>>
>>   - interface: ix0+
>> threads: 8
>>
>> copy-mode: ips
>>
>> copy-iface: ix0
>>
>>
>>
>> But suricata opens 8 threads for ix0, but opens only 1 thread for ix0+ (sw_ring) interface.
>>
>> Also i tried https://github.com/OISF/suricata/pull/3596 pull request. It also behaves same.
>>
>>
>>
>> I need to increase number of threads for ix0+ (sw_ring part) because of throughput needs. Each thread can handle about 1.3Gbps. I want to reach to 10Gbps.
>>
>>
>>
>> Is it possible to configure number of threads for ix0+ ?
>>
>>
>>
>> Thank you. Regards
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/



-- 
Michael Shirk
Daemon Security, Inc.
https://www.daemon-security.com


More information about the Oisf-users mailing list