From: Michael Tremer Date: Thu, 28 Feb 2019 14:28:22 +0000 (+0000) Subject: suricata: Increase memory size for the stream engine X-Git-Tag: v2.23-core131~117^2~15 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0b340f0938e5f292f74f5f2e60b3d46d473f2096;p=ipfire-2.x.git suricata: Increase memory size for the stream engine This change also ensures that suricata has a decent number of streams preallocated to be able to handle any bursts in traffic. Signed-off-by: Michael Tremer Signed-off-by: Stefan Schantl --- diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index 7eb8027b2a..0131059108 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -627,7 +627,8 @@ flow-timeouts: # # is used in a rule. # stream: - memcap: 64mb + memcap: 256mb + prealloc-sessions: 4k checksum-validation: yes # reject wrong csums inline: auto # auto will use inline mode in IPS mode, yes or no set it statically reassembly: @@ -636,10 +637,9 @@ stream: toserver-chunk-size: 2560 toclient-chunk-size: 2560 randomize-chunk-size: yes - #randomize-chunk-range: 10 - #raw: yes - #segment-prealloc: 2048 - #check-overlap-different-data: true + raw: yes + segment-prealloc: 2048 + check-overlap-different-data: true # Host table: #