small print: limited to 100K concurrent flows and 10k rules. Just checked a box running zeek/suricata that is seeing 25gbps with about 50k rules, it's currentl

small print: limited to 100K concurrent flows and 10k rules. Just checked a box running zeek/suricata that is seeing 25gbps with about 50k rules, it's currently tracking a bit north of 1 million flows. so you'd only need 10 of their 'fastest' system to handle what this one system is doing.