Open Information Security Foundation

12/09/2024

03:22 PM Suricata Bug #7444 (In Review): dpdk: RSS key length missmatch on ice (E810) card with DPDK version 22.11.6

https://github.com/OISF/suricata/pull/12252 Lukas Sismis

12/08/2024

02:57 PM Suricata Bug #7444 (Closed): dpdk: RSS key length missmatch on ice (E810) card with DPDK version 22.11.6

Suricata won't start with ICE card and DPDK of version (at least 22.11.6) because the RSS key length has changed from... Lukas Sismis

11/08/2024

04:21 PM Suricata Feature #7382 (New): dpdk: create separate packet mempools per queue

With high number of threads a single mempool per interface seems to be the bottleneck.
Replace it with a single MP ... Lukas Sismis

04:11 PM Suricata Feature #7381 (New): dpdk: when running with ice driver fully start only when link state change event is caught

Running Suricata with "ice" driver (Intel E810) signals as fully started while packets are not received for the first... Lukas Sismis

04:03 PM Suricata Feature #7380 (New): dpdk: provide "auto" option for RX/TX descriptors

By obtaining the information on the amount of available/free hugepages and hugepage size we can deduce the maximum nu... Lukas Sismis

03:10 PM Suricata Bug #7378 (New): dpdk: having too few hugepages can lead to segfault on startup

Starting Suri with the usual params and mempool size set to ~262143.
Just one 2MB Hugepage allocated.
The output:
... Lukas Sismis

03:05 PM Suricata Bug #7376 (New): dpdk: delayed detect won't fully start Suricata until the first traffic

With delayed detect a rule reload starts but you will never see the rule reload complete until you actually forward t... Lukas Sismis

02:59 PM Suricata Bug #7374 (New): dpdk: iface-copy should not be mandatory

Suricata won't start if iface-copy iface-copy-mode are not present. Set the default to "none". Lukas Sismis

02:31 PM Suricata Feature #7373 (New): dpdk: provide "auto" option to mempool-size property

Manually inputting mempool size and mempool cache size might not be necessary as it can be calculated from the number... Lukas Sismis

10/31/2024

09:37 AM Suricata Feature #7330: dpdk: support HW VLAN stripping

When changing to an "In Review" state also link the GitHub PR link (the initial is enough).
Linking here:
https:/... Lukas Sismis