Hi Madhu this is not possible with RSS, thus it is not possible in IPS mode at the moment, in order to to that you need extensions to pfring-daq-module-zc to work with zbalance_ipc in IPS mode as I said. This feature will be added as soon as possible, we have other high priority stuff in the roadmap atm, please let us know if you are willing to fund the development, in this case we can allocate some engineer.
Alfredo > On 09 Feb 2016, at 04:52, Madhu R <[email protected]> wrote: > > Hi Alfredo > Is the a way to distribute the load depending on the packets types which i am > receiving to different instances of snort IPS. > > Regards > Madhu > > > > From: [email protected] > <[email protected]> on behalf of Madhu R > <[email protected]> > Sent: Tuesday, February 9, 2016 9:20 AM > To: [email protected] > Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort > > Hi Alfredo > Is the a way to distribute the load depending on the packets which i am > receiving to different instances of snort IPS. > > > From: [email protected] > <[email protected]> on behalf of Alfredo Cardigliano > <[email protected]> > Sent: Monday, February 8, 2016 9:20 PM > To: [email protected] > Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort > > Hi Madhu > pfring-daq-module-zc requires some extensions in order to support IPS mode in > combination with zbalance_ipc, > at the moment it is not able to attach to zbalance_ipc and recv/forward > traffic from/to queues in IPS mode. > > Alfredo > >> On 08 Feb 2016, at 13:07, Madhu R <[email protected] >> <mailto:[email protected]>> wrote: >> >> Hi Alfredo >> I have a requirement like >> assume that there are 4 instances of snort IPS running with different rules >> on different cores, >> now i have distribute packets across multiple instances of snort on the type >> of packet which i receive at load balancer . I tried to implement this >> scenario with the zbalance_ipc for the packet distribution (at last i came >> to know that its not possible to do it with zbalance_ipc). In earlier mail >> as you suggested to use RSS for distribution load across multiple instances >> of snort,But I want to distribute the load depending on type of packet. Is >> there a way to do it using the PF_RING. >> >> >> Reards >> Madhu >> From: [email protected] >> <mailto:[email protected]> >> <[email protected] >> <mailto:[email protected]>> on behalf of Alfredo >> Cardigliano <[email protected] <mailto:[email protected]>> >> Sent: Monday, February 8, 2016 2:15 PM >> To: [email protected] <mailto:[email protected]> >> Subject: Re: [Ntop-misc] Zbalance_ipc as a Load balance for snort >> >> Hi Madhu >> please use RSS for distributing the load in IPS mode as described here: >> https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st >> >> <https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> >> >> <https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> >> ntop/PF_RING >> <https://github.com/ntop/PF_RING/blob/dev/userland/snort/pfring-daq-module-zc/README.1st> >> github.com <http://github.com/> >> PF_RING - High-speed packet processing framework >> >> >> zbalance_ipc is not supported in the pfring-daq-module-zc at the moment. >> >> Alfredo >> >>> On 08 Feb 2016, at 06:51, Madhu R <[email protected] >>> <mailto:[email protected]>> wrote: >>> >>> Hi, >>> can i use the zbalance_ipc as a load balancer application to distribute >>> the load across different instances of snort IPS . >>> >>> Regrads, >>> Madhu >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] <mailto:[email protected]> >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>> <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] <mailto:[email protected]> >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
