Hi Alfredo Is the a way to distribute the load depending on the packets which i am receiving to different instances of snort IPS.
________________________________ From: [email protected] <[email protected]> on behalf of Alfredo Cardigliano <[email protected]> Sent: Monday, February 8, 2016 9:20 PM To: [email protected] Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort Hi Madhu pfring-daq-module-zc requires some extensions in order to support IPS mode in combination with zbalance_ipc, at the moment it is not able to attach to zbalance_ipc and recv/forward traffic from/to queues in IPS mode. Alfredo On 08 Feb 2016, at 13:07, Madhu R <[email protected]<mailto:[email protected]>> wrote: Hi Alfredo I have a requirement like assume that there are 4 instances of snort IPS running with different rules on different cores, now i have distribute packets across multiple instances of snort on the type of packet which i receive at load balancer . I tried to implement this scenario with the zbalance_ipc for the packet distribution (at last i came to know that its not possible to do it with zbalance_ipc). In earlier mail as you suggested to use RSS for distribution load across multiple instances of snort,But I want to distribute the load depending on type of packet. Is there a way to do it using the PF_RING. Reards Madhu ________________________________ From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> on behalf of Alfredo Cardigliano <[email protected]<mailto:[email protected]>> Sent: Monday, February 8, 2016 2:15 PM To: [email protected]<mailto:[email protected]> Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort Hi Madhu please use RSS for distributing the load in IPS mode as described here: https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st [https://avatars2.githubusercontent.com/u/12014789?v=3&s=400]<https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> ntop/PF_RING<https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> github.com<http://github.com/> PF_RING - High-speed packet processing framework zbalance_ipc is not supported in the pfring-daq-module-zc at the moment. Alfredo On 08 Feb 2016, at 06:51, Madhu R <[email protected]<mailto:[email protected]>> wrote: Hi, can i use the zbalance_ipc as a load balancer application to distribute the load across different instances of snort IPS . Regrads, Madhu _______________________________________________ Ntop-misc mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
