Hi,
we have a 10Gb internet connection and recently we debugged some performance topics and ended up by the question: What will increase our throughput better: more cores or more GHz.
We saw that with IPS our troughput is dropping very much while one snort process is running at 100% cpu.
With IPS enabled: +- 75 MB/s, IPS disabled: 450MB/s. MB not mbit.
Currently we have a dual CPU 8-Core X3460@2.80GHz while the average CPU usage is low in the reporting graphs.
As the hardware is quit old, we plan to upgrade to new servers and try to check for new cpus. May be a single CPU E5-1650 6-Core@3,6 GHz would be a good choice?!
We don't have that much concurrent connection, but need fast ones :)
Thanks for feedback and suggestions. Regards . Götz
This thread was automatically locked due to age.