This section contains best practices for the Suricata Snort engine under the following test parameters:
For NS-series Sensor models NS9500, NS9300, NS9200, and NS9100, the performance results are based on 2,000 simultaneous requests.
For NS-series Sensor models NS7500, NS7300, NS7200, NS7100, NS5200, NS5100, NS3500, NS3200, and NS3100, the performance results are based on 1,000 simultaneous requests.
Sensor | Throughput |
|---|---|
NS9500 stack - 100 Gbps throughput | 40 Gbps |
NS9500 stack - 60 Gbps throughput | 20 Gbps |
NS9500 stack - 40 Gbps throughput | 13.6 Gbps |
NS9500 standalone - 30 Gbps throughput | 10 Gbps |
NS9500 standalone - 20 Gbps throughput | 6.8 Gbps |
NS9500 standalone - 10 Gbps throughput | 3.8 Gbps |
NS9300 | 13.2 Gbps |
NS9200 | 6.7 Gbps |
NS9100 | 3.5 Gbps |
NS7500 - 7.5 Gbps throughput | 3.5 Gbps |
NS7500 - 5 Gbps throughput | 2.5 Gbps |
NS7500 - 3 Gbps throughput | 1.5 Gbps |
NS7300 | 1.85 Gbps |
NS7200 | 1.7 Gbps |
NS7100 | 1.35 Gbps |
NS5200 | 1.15 Gbps |
NS5100 | 1.1 Gbps |
NS3500 | 200 Mbps |
NS3200/NS3100 | 200 Mbps |
Note
The Suricata Snort engine is not available on NS9600, NS7600, and NS3600 Sensors.