[Oisf-users] Suricata on a tiny computer Atom D525

[Victor Julien]

On 15-12-15 16:09, David Touzeau wrote:
> basically the Internet bandwidth should be less than 10MB and networks
> not up to 100MB
> runmode will be pfring with emergingthreats

I used to run Suricata in IPS mode (nfqueue) on a N270 (single core atom
of about the same time as your D525) on a 10/1Mbit DSL with a 10k or so
rule ET set. It ran well.

Cheers,
Victor


> 
> 
> Le 15/12/2015 15:37, Andreas Herz a écrit :
>> On 15/12/15 at 15:32, David Touzeau wrote:
>>> Dear
>>>
>>> I would like to implement Suricata on this machine:
>>> http://www.acrosser.com/Products/Networking-Appliance/MicroBox/AND-D525N2/Intel-Atom-D525---AND-D525N2.html
>>> This is an intel *Intel D525 1.8GHz with 2GB memory.  What is the best
>>> settings in order to not overload the machine with suricata ?
>> Well the question is what do you want to achieve.
>> Depending on the amount of traffic, rulest and the runmode you want to
>> use it's totally fine to use such hardware.
>>
>> With more details it's also easiere to tell which settings you could
>> optimize.
>>
> 
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net
> 


-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------