[Bro] integrate FPGA\PF_RING supported NIC with Bro - offload

[william de ping]

I use Bro 2.5, ubuntu server 16.04, PF_RING 6.6

So af_packet will speed up the packet source \ IO loop part of Bro more
than PF_RING ?
After reading about it they seem to provide roughly the same output in
terms of speed.

It still seems like speeding up the reading of network traffic to Bro can
get you so far, no other ways of taking some of Bro's processing and
offload them to a network card\ FPGA card ?

Thanks

On Tue, Nov 14, 2017 at 5:57 PM, Michał Purzyński <
michalpurzynski1 at gmail.com> wrote:

> X520 and X710 can handle that easily, with afpacket.  No need for pfring,
> it would not even come close to 10Gbit anyway.
>
> Which distribution do you have to use?
>
> > On Nov 14, 2017, at 4:34 PM, william de ping <bill.de.ping at gmail.com>
> wrote:
> >
> > Hi all,
> >
> > I wonder if anyone had a chance of somehow incorporate a FPGA NIC \
> Smart NIC \ Napatech \ PF_RING with Bro ?
> >
> > I would like to scale my Bro cluster and process higher volumes of
> traffic (5-10Gbps). Currently I use PF_RING supported nic (intel X710) to
> LB the traffic to multiple workers - this environment cannot handle the
> above traffic load.
> > I could always beef up my server but that does not seem like an elegant
> solution.
> >
> > Could there be any benefits for moving to Napatech NIC or FPGA supported
> NIC ?
> > In what scenario an FPGA card can be integrated with Bro to offload some
> of its more tedious tasks to the smart nic ?
> >
> > Any ideas would be appreciated
> > Thanks
> > B
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20171114/f65ebfa7/attachment-0001.html