"Quote from: Seimus on October 19, 2025, 04:04:44 PMNot sure about Suricata, but I have tuned RSS due to ZenArmor. I was able to go from ~1G cap to around ~1.7G, so there is definitely a performance gain when done properly.
Could you share the tunes you made?
Quote from: Melroy vd Berg on October 18, 2025, 02:09:59 PMI found and read the following reply from Giuseppe, which is one of the collaborators of netmap here.
Stating:QuoteThe one you are interested in are ring_num and buf_num
Meaning, you can of course increase the buffer size itself, but you most likely want to increase the number of buffers available to netmap.
What I tried thus far is:
- Doubling the buffer size, by setting; dev.netmap.buf_size to: 4096
- More importantly increase the buffers, using; dev.netmap.buf_num to 327680
- As well as setting; dev.netmap.ring_num to 400
You might want to add these values to the tunables and then reboot the system.
I noticed that when installing Zenarmor the following is added in tunables:
dev.netmap.buf_num runtime 1000000 Automatically added by Zenarmor
dev.netmap.ring_num runtime 1024 Automatically added by Zenarmor
Thnx, IA.
