suricata: Tie queues to a CPU core

This should improve performance by a small margin

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/initscripts/system/suricata b/src/initscripts/system/suricata
index ae434df65c994cc853c880a35e5b161893de294c..16548753e9960bc98d45e77a5822da8368c1af4c 100644 (file)
--- a/src/initscripts/system/suricata
+++ b/src/initscripts/system/suricata
@@ -75,8 +75,8 @@ function generate_fw_rules {
                        # Check if there are multiple cpu cores available.
                        if [ "$cpu_count" -gt "1" ]; then
                                # Balance beetween all queues.
-                               NFQ_OPTIONS+="--queue-balance 0:"
-                               NFQ_OPTIONS+=$(($cpu_count-1))
+                               NFQ_OPTIONS+="--queue-balance 0:$(($cpu_count-1))"
+                               NFQ_OPTIONS+=" --queue-cpu-fanout"
                        else
                                # Send all packets to queue 0.
                                NFQ_OPTIONS+="--queue-num 0"