Use the load distribution feature of Napatech SmartNICs to improve performance of
Zeek.
This describes a configuration example to use the load
distribution feature of Napatech SmartNICs which improves performance of Zeek.
-
Configure SmartNICs as described in SmartNIC Configuration.
-
Edit the /opt/napatech3/etc/node.cfg file. Add Napatech interfaces
between nt3g0 and nt3g15. Each of your worker nodes must
be pinned to a target CPU core using the pin_cpus parameter. This is
what worker nodes should look like using Napatech interfaces and CPU pinning.
...
#
[worker-1]
type=worker
host=localhost
interface=nt3g0
pin_cpus=0
#
[worker-2]
type=worker
host=localhost
interface=nt3g1
pin_cpus=1
...
#
[worker-15]
type=worker
host=localhost
interface=nt3g14
pin_cpus=14
#
[worker-16]
type=worker
host=localhost
interface=nt3g15
pin_cpus=15
-
Run deploy in the ZeekControl shell, after the Zeek configuration
file is modified.
-
Start the monitoring and profiling tools for
performance monitoring. See SmartNIC Performance Monitoring.