Suricata get poor performance in DPDK or af-packet

Help
1

Please include the following information with your help request:

  • Suricata version
  • Operating system and/or Linux distribution
  • How you installed Suricata (from source, packages, something else)

Suricata version : 7.0.8
Operating system and/or Linux distribution : Ubuntu 24.04 LTS server
How you installed Suricata (from source, packages, something else) : Build from source

I have configured a Dell R7525 with two EPYC 7763 CPUs and installed 32GB x 32 memory modules. Disabled HT and make each CPU as 1 numa node. The NIC in use is Mellanox CX6 Dx.

While testing Suricata in IPS or TAP mode, I observed a packet loss rate of 97% when sending 149 Mpps from another machine using DPDK.

This is my current configuration. I have adjusted some settings and tested with AF-Packet, but I still get the same results.

Am I missing any critical configurations?

Config file

2

Update some config, but only get around 700Mbit speed on iperf3(MTU1500) testing.
for 64Byte testing only 1.8Mpps performance.

suricata2.yaml (86.4 KB)

3

Can you also post your suricata.log since those small numbers sound really odd and should perform better.