Hi Madhu pfring-daq-module-zc requires some extensions in order to support IPS mode in combination with zbalance_ipc, at the moment it is not able to attach to zbalance_ipc and recv/forward traffic from/to queues in IPS mode.
Alfredo > On 08 Feb 2016, at 13:07, Madhu R <[email protected]> wrote: > > Hi Alfredo > I have a requirement like > assume that there are 4 instances of snort IPS running with different rules > on different cores, > now i have distribute packets across multiple instances of snort on the type > of packet which i receive at load balancer . I tried to implement this > scenario with the zbalance_ipc for the packet distribution (at last i came to > know that its not possible to do it with zbalance_ipc). In earlier mail as > you suggested to use RSS for distribution load across multiple instances of > snort,But I want to distribute the load depending on type of packet. Is > there a way to do it using the PF_RING. > > > Reards > Madhu > From: [email protected] > <mailto:[email protected]> > <[email protected] > <mailto:[email protected]>> on behalf of Alfredo > Cardigliano <[email protected] <mailto:[email protected]>> > Sent: Monday, February 8, 2016 2:15 PM > To: [email protected] <mailto:[email protected]> > Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort > > Hi Madhu > please use RSS for distributing the load in IPS mode as described here: > https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st > > <https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> > > <https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> > ntop/PF_RING > <https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> > github.com <http://github.com/> > PF_RING - High-speed packet processing framework > > > zbalance_ipc is not supported in the pfring-daq-module-zc at the moment. > > Alfredo > >> On 08 Feb 2016, at 06:51, Madhu R <[email protected] >> <mailto:[email protected]>> wrote: >> >> Hi, >> can i use the zbalance_ipc as a load balancer application to distribute the >> load across different instances of snort IPS . >> >> Regrads, >> Madhu >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] <mailto:[email protected]> >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> > _______________________________________________ > Ntop-misc mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > <http://listgateway.unipi.it/mailman/listinfo/ntop-misc>
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
