21 May
2013
21 May
'13
7:39 a.m.
John,
On 05/20/2013 10:48 PM, John R Pierce wrote:
afaik, IRQs from a single device have to be handled serially, you can't have more than one active IRQ at the same time.
so there's really no point in distributing them across multiple CPU cores. let the other cores handle user space and other sorts of IOs.
SYN flooding is a pathological condition thats not going to happen under regular workloads, how does your system handle actual network traffic when it approaches network saturation ?
In summary, its very easy to hit a low number of packets/second flood and have the server start looking legitimate ones. I find it hard to believe that one cannot benefit from load balancing the interrupts?
Alex