OPi R1 and Suricata

Any idea when an OS will be built for this?

The reason I am asking is for most home users a 100mb network is more than enough to handle the thruput thru most home routers

I was wanting to see if it was possible to build an ARM release of Suricata and run in on the dual 10/100 ethernet RPi R1 for an inline IDS/IPS setup…

Suricata is a free and open source, mature, fast and robust network threat detection engine.

The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing.

Suricata inspects the network traffic using a powerful and extensive rules and signature language, and has powerful Lua scripting support for detection of complex threats.

With standard input and output formats like YAML and JSON integrations with tools like existing SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other database become effortless.

Suricata’s fast paced community driven development focuses on security, usability and efficiency.

The Suricata project and code is owned and supported by the Open Information Security Foundation (OISF), a non-profit foundation committed to ensuring Suricata’s development and sustained success as an open source projec

Saw this in Armbian…perhaps OPi Zero image would work but might have to manually configure the 2nd eth1??

In August 2017 an H2+ based Orange Pi R1 has been released with 256 MB DRAM, 16 MB (128 Mb) SPI NOR flash, XR819 Wi-Fi replaced with RTL8189ETV and 2 Fast Ethernet MagJacks. One is connected to H2+ internal Fast Ethernet PHY while the other is connected to an onboard RTL8152B USB Ethernet controller attached to usb1 (the Type A receptacle is missing on this board since replaced with the second Ethernet Jack). No PoE option any more

Found the repository


Yes, I am interested to bring Suricata or Snort into dietpi system it would really useful to build up the security of the home network by running a small server such as Pi

There is a new Orange Pi R1 Plus out as well

Gigabit ethernet AND a better/faster processor which is 64bit, however I don’t know if they have a distro built for it yet


There does appear to be an ARM64 build that can support the RK3399, if you could get a working version installed, then run the dietpi-config (or ever side load it) that might get you one step closer to getting the SBC up and running

I found this, which has a full build u-boot image for the firefly that uses the RK3399, so it might be a kickoff as well (it is in testing phase though)