From 4d093b810552339a6a7df774412c8e144f799331 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 26 Mar 2019 21:18:45 +0000 Subject: [PATCH] suricata: Tie queues to a CPU core This should improve performance by a small margin Signed-off-by: Michael Tremer --- src/initscripts/system/suricata | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata index ae434df65c..16548753e9 100644 --- a/src/initscripts/system/suricata +++ b/src/initscripts/system/suricata @@ -75,8 +75,8 @@ function generate_fw_rules { # Check if there are multiple cpu cores available. if [ "$cpu_count" -gt "1" ]; then # Balance beetween all queues. - NFQ_OPTIONS+="--queue-balance 0:" - NFQ_OPTIONS+=$(($cpu_count-1)) + NFQ_OPTIONS+="--queue-balance 0:$(($cpu_count-1))" + NFQ_OPTIONS+=" --queue-cpu-fanout" else # Send all packets to queue 0. NFQ_OPTIONS+="--queue-num 0" -- 2.39.2