Actions
Optimization #5230
closedrules: too much time spent in DetectUnregisterThreadCtxFuncs due to pcre2
Effort:
Difficulty:
Label:
Description
Thread specific data for keywords is stored in a list, which worked fine until recently. However now that pcre2 also uses it, the list can get very large.
Perf flagged it as a major performance bottleneck during ruleset shutdown (incl reload).
Not an issue in 5 and 6.
Actions