From: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu, 4 Apr 2019 21:01:54 +0000 (+0100)
Subject: suricata: Disable CPU affinity
X-Git-Tag: v2.23-core131~53
X-Git-Url: http://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff_plain;h=f903d3a6f0c4a3f2e5251fda7ea2d1b788606294

suricata: Disable CPU affinity

Benchmarks have shown, that this is making the IPS slower
across various hardware

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index 8580827a11..f37294d545 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -697,7 +697,7 @@ spm-algo: auto
 
 # Suricata is multi-threaded. Here the threading can be influenced.
 threading:
-  set-cpu-affinity: yes
+  set-cpu-affinity: no
   # Tune cpu affinity of threads. Each family of threads can be bound
   # on specific CPUs.
   #