suricata: Tie queues to a CPU core
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 26 Mar 2019 21:18:45 +0000 (21:18 +0000)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 26 Mar 2019 21:18:45 +0000 (21:18 +0000)
This should improve performance by a small margin

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
src/initscripts/system/suricata

index ae434df..1654875 100644 (file)
@@ -75,8 +75,8 @@ function generate_fw_rules {
                        # Check if there are multiple cpu cores available.
                        if [ "$cpu_count" -gt "1" ]; then
                                # Balance beetween all queues.
-                               NFQ_OPTIONS+="--queue-balance 0:"
-                               NFQ_OPTIONS+=$(($cpu_count-1))
+                               NFQ_OPTIONS+="--queue-balance 0:$(($cpu_count-1))"
+                               NFQ_OPTIONS+=" --queue-cpu-fanout"
                        else
                                # Send all packets to queue 0.
                                NFQ_OPTIONS+="--queue-num 0"