Throughput drop on Netgate 8200 MAX LAN/VLAN (ix1) with Suricata inline mode

Networking & Firewalls
1

Good day!

Device: Netgate 8200 MAX
Interface: LAN/VLAN (ix1)

With Suricata in inline mode, throughput falls from ~1 Gbps to ~300 Mbps.

With Suricata in legacy mode, throughput remains ~1 Gbps.

What might be causing this?

iperf results;

image
image826×822 172 KB

2

My assumption is that the CPU is not fast enough to handle it in inline mode. I would message Netgate on that to confirm.

1 Like
3

@LTS_Tom

Thank you very much!