[Zeek] Number of CPU cores for 100Gbps

[Justin Azoff]

The guidelines are bit off these days, a single core does more work
than it used to.  However, your math is off by a factor of 10.

Sticking with the rule that one core can do 250mbps, then you need 4
cores to handle 1gbps, 40 to handle 10 gbps, and 400 to handle
100gbps.  Not 4000.

On Sun, Apr 28, 2019 at 2:35 PM Woot4moo <tscheponik at gmail.com> wrote:
>
> My understanding is that 4,000+ CPU cores would be necessary to support this throughput. In the recent meeting from CERN I recall seeing someone describe 200Gbps, which would imply 8,000+ CPU cores. Is this accurate, or am I doing a conversion incorrectly?
>
> I am basing this purely on this quote, from
>
> https://docs.zeek.org/en/stable/cluster/
>
> “The rule of thumb we have followed recently is to allocate approximately 1 core for every 250Mbps of traffic that is being analyzed. However, this estimate could be extremely traffic mix-specific. It has generally worked for mixed traffic with many users and servers. For example, if your traffic peaks around 2Gbps (combined) and you want to handle traffic at peak load, you may want to have 8 cores available (2048 / 250 == 8.2). ”
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin