I’d like to snort. Should I?

[darksky]

RPi4B and even 5B can only handle around 100 Mbps.

Raspberry Pi 5 performance with snort?

I spent some time configuring my RPi5B as a backup router and did the live test with LAN/WAN connected not double NATed as above. Results where similar with the bufferbloat speed test with or without SQM enabled. The RPi5B is just not powerful enough to run snort at gigabit speeds. With SQM enabled: [withsqm_on] Without SQM enabled: [withoutsqm] My connection maxes out around 950 Mbps downstream without snort running on the RPi5B.

If your connection is that speed go for it or if you’re ok limiting the max download. You really need x86 for faster.