]> git.ipfire.org Git - thirdparty/suricata.git/commit
flow-manager: reduce burstiness in adaptive timing 7774/head
authorVictor Julien <vjulien@oisf.net>
Tue, 23 Aug 2022 16:27:30 +0000 (18:27 +0200)
committerVictor Julien <vjulien@oisf.net>
Fri, 26 Aug 2022 05:55:37 +0000 (07:55 +0200)
commit50f877912861360f0461acd05acd7b7b51f9fd0f
treef3ced5ef166ac97ff59acb14493834a56a761e42
parent58ef3cde7a01166a1ae56b814156e2cad02e1251
flow-manager: reduce burstiness in adaptive timing

Previous adaptive model would have a large time range when scanning the
hash when not so busy. In the default case it would take up to 4 minutes
for a full hash scan. In case of sudden increase in business, where the
hash would fill up rapidily during a few seconds, the flow manager would
be forced to suddenly consider a much larger slice of the hash leading
to a burst of work. This burst would increase pressure on the rest of the
system leading to packet loss as the worker threads would be overloaded
with flow housekeeping tasks.

This patch reduces the max scan time to 10 seconds, and ramps up quickly
to increase the slice of the hash scanned.
src/flow-manager.c