# Hardware specification for Suricata

**URL:** <https://forum.suricata.io/t/hardware-specification-for-suricata/2545>\
**Category:** Help\
**Tags:** suricata\
**Created:** [June 3, 2022, 10:05am UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545 "2022-06-03T10:05:05Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![test\_qweqwe](https://avatars.discourse-cdn.com/v4/letter/t/5daacb/32.png) [@test\_qweqwe](https://forum.suricata.io/u/test_qweqwe)\
**Post date:** [June 3, 2022, 10:05am UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545/1 "2022-06-03T10:05:05Z")

</div>

Hello there.  
How to understand which one I need hardware to set up Suricata?  
There are any references? What input data do I need?  
My network throughput is 10-25Gbps+.

---

<div class="post-metadata">

**Author:** ![greg](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/greg/32/236_2.png) [@greg](https://forum.suricata.io/u/greg)\
**Post date:** [June 3, 2022, 5:14pm UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545/2 "2022-06-03T17:14:05Z")

</div>

Hello,

There are a lot of reference information if you Google it, I have some  
info here although the box specs are a bit out of data compared to what  
is currently available. This is with a 40Gbps FPGA

> [@Suricata 6 on PF\_RING and Silicom Fiberblaze FPGA](https://forum.suricata.io/t/suricata-6-on-pf-ring-and-silicom-fiberblaze-fpga/839/2):
>
> Can you post the actual info/guide? A post that just says “contact me” is not something this forum is for.

Greg

---

<div class="post-metadata">

**Author:** ![test\_qweqwe](https://avatars.discourse-cdn.com/v4/letter/t/5daacb/32.png) [@test\_qweqwe](https://forum.suricata.io/u/test_qweqwe)\
**Post date:** [June 4, 2022, 9:20am UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545/3 "2022-06-04T09:20:57Z")

</div>

I found a lot of references, but it was for lab/test envirement and I’m looking for enterprise envirement.  
Thansk for your post.

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [June 5, 2022, 7:42pm UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545/4 "2022-06-05T19:42:11Z")

</div>

This depends on many factors, what runmode do you intend to use? How many signatures are you running? What features do you want to enable?  
The right NIC plays a role as well. But to give you a very very rough idea with 10-25Gbit/s you might want something with at least 20 but better 40 cores that could work on the traffic. So a bigger Intel XEON or AMD Epyc could work, but you could get lucky with something slower. 128GB RAM on top.

---

<div class="post-metadata">

**Author:** ![test\_qweqwe](https://avatars.discourse-cdn.com/v4/letter/t/5daacb/32.png) [@test\_qweqwe](https://forum.suricata.io/u/test_qweqwe)\
**Post date:** [June 6, 2022, 3:30pm UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545/5 "2022-06-06T15:30:16Z")

</div>

I must admit, I did not dig that deep.  
I was considering that I will install Suricata on server with default configuration and then I will disable some most noise/useful for my envirement rules.

I will do PoC. Maybe you can tell me what I need to look at to understand better what hardware I need to buy?

---

<div class="post-metadata">

**Author:** ![Andreas\_Herz](https://yyz2.discourse-cdn.com/flex030/user_avatar/forum.suricata.io/andreas_herz/32/52_2.png) [@Andreas\_Herz](https://forum.suricata.io/u/Andreas_Herz)\
**Post date:** [June 7, 2022, 12:28pm UTC](https://forum.suricata.io/t/hardware-specification-for-suricata/2545/6 "2022-06-07T12:28:24Z")

</div>

Well you need to check the traffic you want to forward, how you want to forward it. Also what you want to monitor, what is your goal for that.

But the hardware I mentioned could be a good starting point.
