Performance tuning for IPS maximum performance

Started by dcol, December 08, 2017, 05:13:30 PM

Previous topic - Next topic
Guys,

Any update on the tunables for igc?  Which among them are still relevant?

Is this information still relevant for Suricata 8.03?

Quote from: MagikMark on March 09, 2024, 10:57:59 PMGuys,

Any update on the tunables for igc?  Which among them are still relevant?
I had posted some time ago my set of sysctl settings that were applied, taken from various sources listed in the post. No formal testing was done though. Suggested settings are just that. True-tried is cumbersome but has more weight relevant to "suggested".

IIRC, most of my settings are router relevant because my FW does very little host stuff.
Mini-pc N150 i226v x520, FREEDOM

As far as i understand it correctly, not all tunables are for every hardware right?
I have many tunables configured, some on the hard way (something broke needed a restore to backup settings).
So my question is: How can i proof that these tunables are working with my Hardware?
Protectli FW4B
Intel J6412 4 cores
4x Intel I225-V 2,5 Gbit/s
16 GB memory
480 GB m.2 SATA SSD storage
Coreboot

Some tunables are specific those per NIC. So you need to know what nic you use for example if you have ax than tunables with igc will not do anything.

If a tunable is not anymore available in FBSD, than in the UI it will be flagged and you will see a message next to the tunable that is unknown or something like that.

Regards,
S.
 
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
N355 - i226-V | AQC113C | 16G | 500G - PROD

PRXMX
N5105 - i226-V | 2x8G | 512G - NODE #1
N100 - i226-V | 16G | 1T - NODE #2