Hi Alfredo I have a requirement like assume that there are 4 instances of snort IPS running with different rules on different cores, now i have distribute packets across multiple instances of snort on the type of packet which i receive at load balancer . I tried to implement this scenario with the zbalance_ipc for the packet distribution (at last i came to know that its not possible to do it with zbalance_ipc). In earlier mail as you suggested to use RSS for distribution load across multiple instances of snort,But I want to distribute the load depending on type of packet. Is there a way to do it using the PF_RING.
Reards Madhu ________________________________ From: [email protected] <[email protected]> on behalf of Alfredo Cardigliano <[email protected]> Sent: Monday, February 8, 2016 2:15 PM To: [email protected] Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort Hi Madhu please use RSS for distributing the load in IPS mode as described here: https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st [https://avatars2.githubusercontent.com/u/12014789?v=3&s=400]<https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> ntop/PF_RING<https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> github.com PF_RING - High-speed packet processing framework zbalance_ipc is not supported in the pfring-daq-module-zc at the moment. Alfredo On 08 Feb 2016, at 06:51, Madhu R <[email protected]<mailto:[email protected]>> wrote: Hi, can i use the zbalance_ipc as a load balancer application to distribute the load across different instances of snort IPS . Regrads, Madhu _______________________________________________ Ntop-misc mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
