OPNsense Forum

English Forums => Hardware and Performance => Topic started by: Mming on May 05, 2025, 05:10:39 PM

Title: HW performance with Zenarmour and/or Suricata IDS
Post by: Mming on May 05, 2025, 05:10:39 PM
I'm currently running Opnsense on a Protectli VP2420 appliance with an Intel J6412 CPU and 16G ram. So far performance is excellent, but as the heading indicates I contemplate to add Zenarmour and/or Suricata IDS. I wondered if anyone have experience with the same appliance or at least the same CPU who can tell me their experiences with the overall performance when these additopns are enabled?

/MM
Title: Re: HW performance with Zenarmour and/or Suricata IDS
Post by: cast.castovsky on June 13, 2025, 07:31:47 AM
Hi
I tested Wyse 5070 with J5005 CPU + 16GB RAM + LAN based on M2+E with Realtek 8111f. SSD M2 128GB
Added Suricata + Crowstrike on WAN and Zenarmor on LAN.
GEOIP for blocking large number of IPv4 addresses. 20+ users.
It works, the CPU usage usually vary from 30-70%. Power consumption: 4.8-7.8W, seldom up to 9.x Watts.
It is OK, but after few days I decided to come back to my Lenovo M710q with i5-7500T.
I have much more power with 10.8-11.6 Watts. The only disadvantage is that it has active cooling (very quiet)
My internet line is 600/60

edit: https://www.cpubenchmark.net/compare/3144vs4474vs2276/Intel-Pentium-Silver-J5005-vs-Intel-Celeron-J6412-vs-Intel-i5-4590T
Just checked your CPU vs J5005 and my i5-4590T I use for my test lab (Lenovo M83).
Comparing benchmarks, I think you can go with this, what you have.
Title: Re: HW performance with Zenarmour and/or Suricata IDS
Post by: Mming on June 13, 2025, 01:19:08 PM
Thanks for the feedback, it's appreciated.

∕MM