Hello, When using an ixgbe card with Suricata we are using the following commands to get a symmetric hash on RSS load balancing:
./set_irq_affinity 0-15 eth3 ethtool -X eth3 hkey 6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A:6D:5A equal 16 ethtool -x eth3 ethtool -n eth3 Then we start Suricata. In my current experiment on XDP, I have Suricata that inject the eBPF program when starting. The consequence of that when using an ixgbe card is that the load balancing get reset and all interrupts are reaching the first core. My analysis is that in the ixgbe_xdp_setup() function we call ixgbe_setup_tc() that reset the hash tuning parameter. If we run the affinity script and the ethtool commands after XDP is loaded then things are going normal again. But this is not an optimal behavior. Is this really what is happening ? Is there a known workaround for this issue ? BR, -- Eric Leblond <e...@regit.org>
