Bug 13687

Summary: Replace Hyperscan with Vectorscan
Product: IPFire Reporter: Michael Tremer <michael.tremer>
Component: ---Assignee: Adolf Belka <adolf.belka>
Status: CLOSED FIXED QA Contact:
Severity: Balancing    
Priority: Will affect an average number of users    
Version: 2   
Hardware: unspecified   
OS: Unspecified   

Description Michael Tremer 2024-05-13 08:05:58 UTC
It has been reported that Intel has made Hyperscan proprietary:

> https://community.ipfire.org/t/suricata-hyperscan-question/11625
> https://www.phoronix.com/news/Intel-Hyperscan-Now-Proprietary

As this is the path that Fedora is going and because Vectorscan implements ARM as well, I feel comfortable with following.

@Adolf: Would you like to remove Hyperscan and replace it with Vectorscan? Currently we only build Hyperscan for x86_64. I believe that we no longer have this restriction for ARM.
Comment 1 Adolf Belka 2024-05-13 11:18:45 UTC
Sure I will pick this up.
Comment 2 Adolf Belka 2024-05-14 11:35:46 UTC
Patch created and submitted for removing hyperscan and replacing with vectorscan


https://patchwork.ipfire.org/project/ipfire/list/?series=4284
Comment 4 Adolf Belka 2024-07-22 19:32:54 UTC
CU187 Testing has been released.

https://www.ipfire.org/blog/ipfire-2-29-core-update-187-is-available-for-testing
Comment 5 Michael Tremer 2024-07-23 10:30:49 UTC
> https://community.ipfire.org/t/core-187-testing-suricata-not-working/11839

For reference.

We are supporting all CPUs, but require SSE4.2 to use Vectorscan.