IPS (snort) performace
It's neccesary to increase IPS performance.
Now IPS (Snort) use only one core and then its performace is full dependent on core speed so adding more cores don't increase performace.
It's a big problem in installations with high speed fiber connection, where we must disable IPS because it may drop from 300 Mb. to 50 Mb.
There are some snort implementations that are capable of use multicore so I think it's possible to do it in KControl.
Zdeněk Vašků commented
SNORT only uses 1 thread = 1 CPU core and is very slow. I can not go over 120Mb/s.