cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Threads for analyzer

skung
Organizer

we are on DCRUM version 12.2. What's the maximum threads AMD can be configured for HTTP, HTTPS, SOAP/XML?

8 REPLIES 8

wojciech_kurek
Inactive

Sharyl,

The maximum number of analysis threads on the AMD is 5. Nothing has changed for 12.2 in this matter.

Wojtek.

so we can have on one AMD -


5 - http


5 - https


5 - ssl(or same as https)


5 - SOAP/XML


right?

wojciech_kurek
Inactive

It's 5 threads per AMD, not decode. The traffic for all decodes will be balanced between those 5 threads.

if I have this in rtm.config - what's impact?


ssl.engine.param=threads:4


FYI - this was recommendation from support team for one of old tickets

wojciech_kurek
Inactive

This is the number of threads performing SSL decryption - they are separate from the regular analysis threads. 4 is a fine value, provided that the machine has enough CPUs, increasing it further won't help though.

In general, the 5 thread limit relates to packet analysis threads. The whole AMD uses a lot more threads for other tasks, like the mentioned SSL decryption, reading packets from NICs and dispatching them, sequenced transaction assembly, etc. That's why a larger amount of CPUs is required.

so we don't need to specify threads to decode each type of traffic - http/https and SOAP/XML?  if we assign one AMD only process https traffic then the load will be balanced through 5 threads, right? if one AMD has mix http (20%) and https (80%) how to make sure it assigns enough threads to handle https traffic?

wojciech_kurek
Inactive

Correct. Decodes are not bound to particular CPUs and the AMD will equally balance traffic between all 5 threads automatically - in your case (20% http, 80% https), 1 thread would process http traffic and 4 of them - https.

Thanks for clarification