Threads for analyzer
we are on DCRUM version 12.2. What's the maximum threads AMD can be configured for HTTP, HTTPS, SOAP/XML?
Sharyl,
The maximum number of analysis threads on the AMD is 5. Nothing has changed for 12.2 in this matter.
Wojtek.
so we can have on one AMD -
5 - http
5 - https
5 - ssl(or same as https)
5 - SOAP/XML
right?
It's 5 threads per AMD, not decode. The traffic for all decodes will be balanced between those 5 threads.
if I have this in rtm.config - what's impact?
ssl.engine.param=threads:4
FYI - this was recommendation from support team for one of old tickets
This is the number of threads performing SSL decryption - they are separate from the regular analysis threads. 4 is a fine value, provided that the machine has enough CPUs, increasing it further won't help though.
In general, the 5 thread limit relates to packet analysis threads. The whole AMD uses a lot more threads for other tasks, like the mentioned SSL decryption, reading packets from NICs and dispatching them, sequenced transaction assembly, etc. That's why a larger amount of CPUs is required.
so we don't need to specify threads to decode each type of traffic - http/https and SOAP/XML? if we assign one AMD only process https traffic then the load will be balanced through 5 threads, right? if one AMD has mix http (20%) and https (80%) how to make sure it assigns enough threads to handle https traffic?
Correct. Decodes are not bound to particular CPUs and the AMD will equally balance traffic between all 5 threads automatically - in your case (20% http, 80% https), 1 thread would process http traffic and 4 of them - https.
