Suricata Inline on LAGG interface
-
Since I don't mind asking stupid questions, I'm asking…
Is it possible to run Suricata Inline on a LAGG interface? My Intel X710 10G card cannot run Suricata Inline currently - it totally hoses traffic throughput when enabled. I get a MDD error in the logs and everything stops.
But I have a quad-port Intel card that uses the igbe driver and was wondering if it was possible to LAGG those together and then run Suricata on the LAGG interface in Inline mode.
Common sense and logic tell me this is not possible, but as I said, I don't mind asking stupid questions. After 20 years in the IT field, I still learn something new everyday.
-
I know this is an old topic but I ran into a situation where we would like to do this also...did you try it? Or does anyone know the answer?