three instances are running on the same chassis

[venom85jojes]

Hi everyone,

I’m working with an architecture that includes two 3110 chassis, each hosting three instances. The instances are configured in an active/standby HA setup. However, I’ve noticed that when all three instances are running on the same chassis, Snort 3’s memory usage starts to spike, leading to application issues.

The individual instance sizing seems appropriate, so I’m not sure what could be causing this problem. Has anyone experienced a similar issue or have any insights into what might be going wrong?

Any suggestions would be greatly appreciated. Thanks!

DGME (Dollar General Employee Access)

[Marvin Rhoads]

I don't have any deployments running 3110 multi-instance yet so I haven't seen the problem first hand.

Do you know the total average and peak throughput of the three instances? You are dividing up the box which has a base expected throughput of around 17 Gbps so it wouldn't be hard to exceed 1/3 of that given that your physical interfaces are most likely 10 Gbps.