How do I balance bandwidth over several virtual NICs?

[Eliezer Croitoru]

Just wanted to make sure I understand the issue:
Snort is not utilizing from some reason the CPU by not threading or by 
something else with the NIC configuration?
 From my point of view Snort has to do the changes and not the OS, am I 
misunderstanding something?

Thanks,
Eliezer

On 09/22/2014 10:46 PM, Adrian Chadd wrote:
> Hi,
>
> Yes.
>
> * grab an ixgbe NIC and the -HEAD driver; (or cxgbe - I haven't gone
> and written RSS programming code for that just yet);
> * patch it to use a symmetric RSS key;
> * configure up N queues;
> * run an instance of snort on each TX/RX ring from the NIC.
>
> The last step requires that you have snort use netmap rather than just
> straight bpf - or maybe somehow there's a way to glue bpf into a
> single netmap ring.
>
> I haven't wrapped all of this up and thrown it into FreeBSD-HEAD yet,
> but i know that a symmetric RSS key works fine on 82599 hardware with
> a fixed driver.
>
>
> -a