Intel killed Hyperscan

Started by seed, May 10, 2024, 10:08:02 PM

Previous topic - Next topic
Hyperscan as Regex patternmatcher is important for Suricate. Firewalls with CPUs with AVX benefit from this performance gain.

Now Intel makes hyperscan proprietary. I guess this will harm suricata performance on opnsense systems in the future.

https://www.phoronix.com/news/Intel-Hyperscan-Now-Proprietary
i want all services to run with wirespeed and therefore run this dedicated hardware configuration:

AMD Ryzen 7 9700x
ASUS Pro B650M-CT-CSM
64GB DDR5 ECC (2x KSM56E46BD8KM-32HA)
Intel XL710-BM1
Intel i350-T4
2x SSD with ZFS mirror
PiKVM for remote maintenance

private user, no business use

QuoteDue to licensing changes beginning with Hyperscan 5.5[0] to a
proprietary/closed license and general lack of support for the 5.4.x
branch I will be retiring Hyperscan from rawhide.

The intent is to replace the hyperscan package with the vectorscan[1]
package that is currently in the last stages of review[2].
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/UZD4BLRMHPQY27IMYQZ76TXCBULHALFJ/

Vectorscan as a fork:
https://github.com/VectorCamp/vectorscan
i want all services to run with wirespeed and therefore run this dedicated hardware configuration:

AMD Ryzen 7 9700x
ASUS Pro B650M-CT-CSM
64GB DDR5 ECC (2x KSM56E46BD8KM-32HA)
Intel XL710-BM1
Intel i350-T4
2x SSD with ZFS mirror
PiKVM for remote maintenance

private user, no business use

Ok great, let's do IIMB next. ;)


Cheers,
Franco

Quote from: franco on May 12, 2024, 07:12:03 PM
Ok great, let's do IIMB next. ;)


Cheers,
Franco

Indian Institute of Management Bangalore?
kind regards
chemlud
____
"The price of reliability is the pursuit of the utmost simplicity."
C.A.R. Hoare

felix eichhorns premium katzenfutter mit der extraportion energie

A router is not a switch - A router is not a switch - A router is not a switch - A rou....