[Oisf-users] SEPTun & tuned

[Cloherty, Sean E]

I've been working on improving performance /reducing packet loss on our hosts running 4.1.2.  I've experimented with BIOS settings and changes to my current CPU pinning and isolcpu settings.  After reading SEPTun and some external sites about performance tuning, I read about using tuned.  The tuned tool seems to have some overlap with BIOS, cstate and pstate settings, latency, and IRQ polling times.  I have some questions about using tuned:


  1.  Has anyone used these settings with positive results alone or with SEPTun suggested settings?


  1.  Will using tuned hamper, conflict, or overwrite SEPTun settings - i.e. should they be mutual exclusive in your tuning regimen?


  1.  Has anyone used the SEPTun BIOS tuning parameters on an AMD BIOS on Supermicro servers?  Some settings listed for the example HP server are not exposed in the Supermicro BIOS or use a different nomenclature.


  1.  The BIOS settings seem to make sense for improving IDS performance.  However, does each work improve performance if implemented alone, or does the improvement rely on all of the BIOS settings need to be changed together ?

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/performance_tuning_guide/sect-red_hat_enterprise_linux-performance_tuning_guide-tool_reference-tuned_adm


Sean Cloherty
Lead InfoSec Engineer/Scientist
MITRE Corporation
office (781) 271-3707
cell      (781) 697-8043

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20190206/f0165d63/attachment.html>