32CPU + 62G mem
std. 的 yaml , pps packet per second 250 k左右
打算进一步用pf_ring 改进一下 ,mark一个
看到这个:
With these changes, at 24 cores, Suricata performance increases from 12,871 PPS to 258,912 PPS; an almost 20X improvement
(https://people.clarkson.edu/~jmatthew/publications/SPIE_SnortSuricata_2013.pdf)
但这个是 Suricata 1.2 version used ,pope used 2.3.1,是std. yaml应该还有提升空间吧?!
参考:
http://jaseywang.me/2015/01/22/pf_ring-%E5%AF%B9%E7%BD%91%E7%BB%9C%E6%8A%93%E5%8C%85%E6%80%A7%E8%83%BD%E7%9A%84%E6%8F%90%E5%8D%87%E4%B8%8D%E4%BB%85%E4%BB%85%E6%98%AF-30-40/
没有评论:
发表评论