[git.ipfire.org] IPFire 2.x development tree branch, next, updated. dccbdf5b97130f72b4d0bb26d962ffcda8121a51

[Michael Tremer <git@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1969 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  dccbdf5b97130f72b4d0bb26d962ffcda8121a51 (commit)
      from  2c44da1382dfffb311b15250b9e02784b826dff2 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit dccbdf5b97130f72b4d0bb26d962ffcda8121a51
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Fri Apr 12 17:59:21 2019 +0100

    suricata: Take as much off of the CPU as possible
    
    https://suricata.readthedocs.io/en/suricata-4.1.3/performance/high-performance-config.html
    
    This will compile the ruleset as efficient as possible and
    allows the IPS to run faster on smaller systems.
    
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/suricata/suricata.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

Difference in files:
diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml
index f37294d54..3fe78cb2f 100644
--- a/config/suricata/suricata.yaml
+++ b/config/suricata/suricata.yaml
@@ -624,10 +624,10 @@ decoder:
 # If the argument specified is 0, the engine uses an internally defined
 # default limit.  On not specifying a value, we use no limits on the recursion.
 detect:
-  profile: high
+  profile: custom
   custom-values:
-    toclient-groups: 3
-    toserver-groups: 25
+    toclient-groups: 200
+    toserver-groups: 200
   sgh-mpm-context: auto
   inspection-recursion-limit: 3000
 


hooks/post-receive
--
IPFire 2.x development tree