From 35cdc506b06ed2e5fc8f7ad7fe57239eaadbda58 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 26 Mar 2019 21:58:01 +0000 Subject: [PATCH] suricata: Enable CPU affinity This will tie the detection threads to a certain CPU and slightly increases throughput on my system. Signed-off-by: Michael Tremer --- config/suricata/suricata.yaml | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index 3b50157bf7..8580827a11 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -697,7 +697,7 @@ spm-algo: auto # Suricata is multi-threaded. Here the threading can be influenced. threading: - set-cpu-affinity: no + set-cpu-affinity: yes # Tune cpu affinity of threads. Each family of threads can be bound # on specific CPUs. # @@ -717,18 +717,15 @@ threading: - worker-cpu-set: cpu: [ "all" ] mode: "exclusive" - # Use explicitely 3 threads and don't compute number by using - # detect-thread-ratio variable: - # threads: 3 prio: low: [ 0 ] medium: [ "1-2" ] high: [ 3 ] default: "medium" - #- verdict-cpu-set: - # cpu: [ 0 ] - # prio: - # default: "high" + - verdict-cpu-set: + cpu: [ 0 ] + prio: + default: "high" # # By default Suricata creates one "detect" thread per available CPU/CPU core. # This setting allows controlling this behaviour. A ratio setting of 2 will -- 2.39.2