Uploaded image for project: 'Bro Issue Tracker'
  1. BIT-943

PF_Ring plugin to support load balancing while sniffing multiple interfaces

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: High
    • Resolution: Solved
    • Affects Version/s: git/master
    • Fix Version/s: 2.2
    • Component/s: BroControl
    • Labels:
      None
    • External issue ID:
      943

      Description

      As reported by Jordi Ros-Giralt, if you want to sniff two interfaces on the same host and load balance each interface across several workers there are problems where all of the traffic is not monitored because it's all put into the same pf_ring cluster id.

      I suspect we need to do two things:


      - Make cluster_id settable in the worker config as an override for the global option.


      - Make the plugin watch for multiple load balancing rings on the same host (is this possible with the current plugin architecture?) and adapt by making the second load balancing ring use the global value +1.

        Attachments

          Activity

            People

            • Assignee:
              dnthayer Daniel Thayer
              Reporter:
              seth Seth Hall
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: