Actions
Bug #6024
closeddetect: reload rules now takes forever on a rather idle env after #5969
Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Affected Versions:
Effort:
Difficulty:
Label:
Description
As a side effect of #5969, now the switching to the new context takes forever to complete when there isn't frequent new traffic to activate all detection threads (by setting the so_far_used_by_detect flag).
This is especially problematic when suricata is used with a receiver that doesn't support PktAcqBreakLoop.
This change causes the command to reload rules (wait_done = true) to timeout or block the caller for a long time, which essentially would result in liveness check failures.
Actions