Re: Number of CPU cores for 100Gbps

Justin Azoff <[email protected]>
Newsgroups gmane.comp.security.detection.bro
Message-ID <CAPfnCug6z2nci+ic71zi-GYQ3O0k8PzWjsGuMx4+DhzDq6TGqQ@mail.gmail.com>
The guidelines are bit off these days, a single core does more work
than it used to.  However, your math is off by a factor of 10.

Sticking with the rule that one core can do 250mbps, then you need 4
cores to handle 1gbps, 40 to handle 10 gbps, and 400 to handle
100gbps.  Not 4000.

On Sun, Apr 28, 2019 at 2:35 PM Woot4moo <[email protected]> wrote:
>
> My understanding is that 4,000+ CPU cores would be necessary to support this throughput. In the recent meeting from CERN I recall seeing someone describe 200Gbps, which would imply 8,000+ CPU cores. Is this accurate, or am I doing a conversion incorrectly?
>
> I am basing this purely on this quote, from
>
> https://docs.zeek.org/en/stable/cluster/
>
> “The rule of thumb we have followed recently is to allocate approximately 1 core for every 250Mbps of traffic that is being analyzed. However, this estimate could be extremely traffic mix-specific. It has generally worked for mixed traffic with many users and servers. For example, if your traffic peaks around 2Gbps (combined) and you want to handle traffic at peak load, you may want to have 8 cores available (2048 / 250 == 8.2). ”
> _______________________________________________
> Zeek mailing list
> [email protected]
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek



-- 
Justin

_______________________________________________
Zeek mailing list
[email protected]
http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.