Skip to content

ips: Hyperscan pattern matcher is now provided by Vectorscan - #919

Draft
MajorP93 wants to merge 1 commit into
opnsense:masterfrom
MajorP93:vectorscan
Draft

MajorP93 wants to merge 1 commit into
opnsense:masterfrom
MajorP93:vectorscan

Conversation

@MajorP93

@MajorP93 MajorP93 commented Oct 1, 2026 •

Copy link
Copy Markdown

Draft: depends on opnsense/ports#294, opnsense/tools#522 and opnsense/core#10953.

Problem

With opnsense/ports#294 and opnsense/tools#522, Suricata's Hyperscan pattern matcher is provided by Vectorscan instead of Intel Hyperscan, and opnsense/core#10953 relabels the option "Vectorscan". The "Pattern matcher" description in the IPS manual should match.

Proposed solution

Refer to the option as Vectorscan and add one sentence: it is the maintained fork of Intel Hyperscan, which selects the best instruction set (up to AVX-512) supported by the CPU at runtime.

I checked the edited simple table with docutils, and it parses without errors.

AI disclosure

AI tools were used. Model: Claude Opus 5.5 (Claude Code). The change and this description were produced with it, and I directed the work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant