cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

This product reached the end of support date on March 31, 2021.

Threads for analyzer

skung
Organizer

we are on DCRUM version 12.2. What's the maximum threads AMD can be configured for HTTP, HTTPS, SOAP/XML?

8 REPLIES 8

wojciech_kurek
Inactive

Sharyl,

The maximum number of analysis threads on the AMD is 5. Nothing has changed for 12.2 in this matter.

Wojtek.

so we can have on one AMD -


5 - http


5 - https


5 - ssl(or same as https)


5 - SOAP/XML


right?

wojciech_kurek
Inactive

It's 5 threads per AMD, not decode. The traffic for all decodes will be balanced between those 5 threads.

if I have this in rtm.config - what's impact?


ssl.engine.param=threads:4


FYI - this was recommendation from support team for one of old tickets

wojciech_kurek
Inactive

This is the number of threads performing SSL decryption - they are separate from the regular analysis threads. 4 is a fine value, provided that the machine has enough CPUs, increasing it further won't help though.

In general, the 5 thread limit relates to packet analysis threads. The whole AMD uses a lot more threads for other tasks, like the mentioned SSL decryption, reading packets from NICs and dispatching them, sequenced transaction assembly, etc. That's why a larger amount of CPUs is required.

so we don't need to specify threads to decode each type of traffic - http/https and SOAP/XML?  if we assign one AMD only process https traffic then the load will be balanced through 5 threads, right? if one AMD has mix http (20%) and https (80%) how to make sure it assigns enough threads to handle https traffic?

wojciech_kurek
Inactive

Correct. Decodes are not bound to particular CPUs and the AMD will equally balance traffic between all 5 threads automatically - in your case (20% http, 80% https), 1 thread would process http traffic and 4 of them - https.

Thanks for clarification