Performance Characterization of Suricata's Thread Models

In a previous project my fellow Amit Sheoran and I examined how well Suricata IDS runs inside Docker container and virtual machine environments. In April 2017, we further examined Suricata’s various thread models, as a project for Purdue CS525 Parallel Computing course. In this article we first introduce the thread models, and then compare them in terms of performance and resource utilization. Suricata’s Multi-Thread Architecture Compared to Snort IDS, the biggest feature of Suricata is that it adopts multi-threaded design to achieve high performance. Continue reading

Benchmarking Suricata in Different Isolation Systems Using TCPreplay

Containers like LXC are becoming a popular solution to program isolation. Compared to virtual machines (VM), containers tend to have less resource overhead and higher performance, which makes it interesting to explore how much benefit we can get from deploying virtual network functions (VNF) with containers instead of VMs. Therefore, we conducted an experiment in which we compared performance and resource usage of Suricata, a popular multi-threaded IDS program, in bare metal, Docker container, and virtual machine setups, and in different load levels and resource allocation configurations.

Continue reading

onedrived - Microsoft OneDrive client for Linux

onedrived is a client program for Microsoft OneDrive on Linux platform. It enables you to sync local directories with remote OneDrive repositories (a.k.a., “Drive”) of one or more OneDrive Personal account (OneDrive for Business accounts are not yet supported).

The program is written in Python3, and uses official OneDrive Python SDK to communicate with OneDrive server, Keyring to securely store account credentials, and Linux inotify API to monitor file system changes.

Continue reading