Cm4+dfrobot iot board performance inquiry

[trevormcooper]

is anyone running this setup?

wondering if its got enough juice to run IDS/IPS and MWAN3 on top of SQM, 4 vlans, and DoH, my goal is to get as close to enterprise level as i can without going enterprise level, i do have a managed switch and vlan capable AP so ill be running a very vlan heavy setup, i currently have everything running except something for IDS/IPS (snort?) and MWAN3

any tips or recommendations welcome!

[ed8]

These posts indicate that a CM4 (and even Intel N95) is underpowered for an an IDS/IPS like Snort

Tips to reduce CPU usage with snort3

I am running snort3/OpenWRT on a RPi4. The way it is configured, I tend to have one core near 100% CPU usage at any given time. I am wondering if I my configuration could be modified to give less CPU usage?

/etc/snort/snort

config snort 'snort' option config_dir '/etc/snort/' option interface 'eth0:eth1'

/etc/snort/homenet.lua

HOME_NET = [[ 10.9.8.0/24 10.9.7.0/24 10.9.6.0/24 10.9.5.0/24 ]]

/etc/snort/local.lua

snort = {} snort["-Q"] = true ips = { mode = i…

Is there any implementation for openwrt an ips / ids like suricata or snort?

As an example, I tried running snort3/IPS mode on an Intel N95 (x86) and throughput was CPU limited. As I recall 400-600 MBps depending. I switched to a more powerful AMD 5800U (x86) and am not limited,