# Suricata is multi-threaded. Here the threading can be influenced.
threading:
- # On some cpu's/architectures it is beneficial to tie individual threads
- # to specific CPU's/CPU cores. In this case all threads are tied to CPU0,
- # and each extra CPU/core has one "detect" thread.
- #
- # On Intel Core2 and Nehalem CPU's enabling this will degrade performance.
- #
set-cpu-affinity: no
- # Tune cpu affinity of suricata threads. Each family of threads can be bound
+ # Tune cpu affinity of threads. Each family of threads can be bound
# on specific CPUs.
+ #
+ # These 2 apply to the all runmodes:
+ # management-cpu-set is used for flow timeout handling, counters
+ # detect-cpu-set is used for 'worker' threads
+ #
+ # Additionally, for autofp these apply:
+ # receive-cpu-set is used for capture threads
+ # verdict-cpu-set is used for IPS verdict threads
+ #
cpu-affinity:
- management-cpu-set:
cpu: [ 0 ] # include only these cpus in affinity settings