Text only | Text with Images

OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: seed on May 10, 2024, 10:08:02 PM

Title: Intel killed Hyperscan
Post by: seed on May 10, 2024, 10:08:02 PM
Hyperscan as Regex patternmatcher is important for Suricate. Firewalls with CPUs with AVX benefit from this performance gain.

Now Intel makes hyperscan proprietary. I guess this will harm suricata performance on opnsense systems in the future.

https://www.phoronix.com/news/Intel-Hyperscan-Now-Proprietary
Title: Re: Intel killed Hyperscan
Post by: seed on May 10, 2024, 10:27:10 PM
QuoteDue to licensing changes beginning with Hyperscan 5.5[0] to a
proprietary/closed license and general lack of support for the 5.4.x
branch I will be retiring Hyperscan from rawhide.

The intent is to replace the hyperscan package with the vectorscan[1]
package that is currently in the last stages of review[2].
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/UZD4BLRMHPQY27IMYQZ76TXCBULHALFJ/

Vectorscan as a fork:
https://github.com/VectorCamp/vectorscan
Title: Re: Intel killed Hyperscan
Post by: franco on May 12, 2024, 07:12:03 PM
Ok great, let's do IIMB next. ;)


Cheers,
Franco
Title: Re: Intel killed Hyperscan
Post by: chemlud on May 13, 2024, 07:46:34 AM
Quote from: franco on May 12, 2024, 07:12:03 PM
Ok great, let's do IIMB next. ;)


Cheers,
Franco

Indian Institute of Management Bangalore?
Title: Re: Intel killed Hyperscan
Post by: franco on May 13, 2024, 11:36:17 AM
https://github.com/intel/intel-ipsec-mb ;)
Text only | Text with Images