CPU necessary for 1Gbit symmetrical w/ Suricata

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

J--

Active Member
Aug 13, 2016
199
52
28
41
Any input into how much CPU firepower I need for IDS/IPS with Suricata?

I know it varies by ruleset, but personal experiences would be helpful.

I'm running OPNSense virtualized on Proxmox right now, hosted on a Sandy Bridge E3-1265L with two cores assigned, and I lose about half my throughput with Suricata turned on.

Ideally I'd move to something lower power to preserve UPS runtime and lower my power bill. Would one of the Atom units (C3558?) have enough power?