| Summary: | Replace Hyperscan with Vectorscan | ||
|---|---|---|---|
| Product: | IPFire | Reporter: | Michael Tremer <michael.tremer> |
| Component: | --- | Assignee: | Adolf Belka <adolf.belka> |
| Status: | CLOSED FIXED | QA Contact: | |
| Severity: | Balancing | ||
| Priority: | Will affect an average number of users | ||
| Version: | 2 | ||
| Hardware: | unspecified | ||
| OS: | Unspecified | ||
Sure I will pick this up. Patch created and submitted for removing hyperscan and replacing with vectorscan https://patchwork.ipfire.org/project/ipfire/list/?series=4284 The patch set for this has been merged into next which will be CU187 https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=71421e6c17783f9e5957482fc77ffbed37a4baa3 https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=ee5b84beabf05b6a8b2ee1edecc62ca95e2f5de6 https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=c375bcf8cd703e23ca2da222c469a4784b5bfd67 CU187 Testing has been released. https://www.ipfire.org/blog/ipfire-2-29-core-update-187-is-available-for-testing > https://community.ipfire.org/t/core-187-testing-suricata-not-working/11839
For reference.
We are supporting all CPUs, but require SSE4.2 to use Vectorscan.
|
It has been reported that Intel has made Hyperscan proprietary: > https://community.ipfire.org/t/suricata-hyperscan-question/11625 > https://www.phoronix.com/news/Intel-Hyperscan-Now-Proprietary As this is the path that Fedora is going and because Vectorscan implements ARM as well, I feel comfortable with following. @Adolf: Would you like to remove Hyperscan and replace it with Vectorscan? Currently we only build Hyperscan for x86_64. I believe that we no longer have this restriction for ARM.