The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Suricata Snort best practices

Prev Next

This section contains best practices for Suricata Snort engine under the following test parameters:

  • For NS-series Sensor models NS9500, NS9300, NS9200, and NS9100, the performance results are based on 2,000 simultaneous requests.
  • For NS-series Sensor models NS7500, NS7300, NS7200, NS7100, NS5200, NS5100, NS3500, NS3200, NS3100, the performance results are based on 1,000 simultaneous requests.
Sensor Throughput
NS9500 stack - 100 Gbps throughput 40 Gbps
NS9500 stack - 60 Gbps throughput 20 Gbps
NS9500 stack - 40 Gbps throughput 13.6 Gbps
NS9500 standalone - 30 Gbps throughput 10 Gbps
NS9500 standalone - 20 Gbps throughput 6.8 Gbps
NS9500 standalone - 10 Gbps throughput 3.8 Gbps
NS9300 13.2 Gbps
NS9200 6.7 Gbps
NS9100 3.5 Gbps
NS7500 - 7.5 Gbps throughput 3.5 Gbps
NS7500 - 5 Gbps throughput 2.5 Gbps
NS7500 - 3 Gbps throughput 1.5 Gbps
NS7300 1.85 Gbps
NS7200 1.7 Gbps
NS7100 1.35 Gbps
NS5200 1.15 Gbps
NS5100 1.1 Gbps
NS3500 200 Mbps
NS3200/NS3100 200 Mbps