# Memory usage climbing

**URL:** <https://community.ipfire.org/t/memory-usage-climbing/11273>\
**Category:** Hardware\
**Created:** [10 March 2024 09:00 UTC](https://community.ipfire.org/t/memory-usage-climbing/11273 "2024-03-10T09:00:47Z")\
**Posts on this page:** 1\
**Showing post:** 9

<div class="post-metadata">

**Author:** ![peppetech](https://community.ipfire.org/user_avatar/community.ipfire.org/peppetech/32/12711_2.png) [@peppetech](https://community.ipfire.org/u/peppetech)\
**Post date:** [12 March 2024 19:20 UTC](https://community.ipfire.org/t/memory-usage-climbing/11273/9 "2024-03-12T19:20:34Z")

</div>

How is your memory usage after restarting IPS and waiting about a day?

I noticed as well that Suricata rules, [use a lot of RAM.](https://community.ipfire.org/t/threatfox-ips-rules/10806/15)

although in your case having 16 GB is plenty

> [@sec-con](#):
>
> Added a few rule sets, that is all.
> 
> ![image](https://community.ipfire.org/uploads/default/original/2X/2/2b93ef3a17ad6d5c4e56d90c6779101e1094c466.png)

I would remove at least 3 of your rules  
OISF and PT have been EOL, for a while and SNORT might be a duplicate of ET

> **[Rulesets](https://www.ipfire.org/docs/configuration/firewall/ips/rulesets)**

On my IPFIre, I added Threatfox and URLHaus rules, Threatfox is a real memory hog as mentioned before.

If you are interested in IP Blocklists, or maybe RPZ blocklists, I am listing a bunch here,

> [@Add additional sources to IPFire blocklist feature](https://community.ipfire.org/t/add-additional-sources-to-ipfire-blocklist-feature/8416/24):
>
> I couldn’t verify the source I was wondering about the other gihub account not Gerd’s, because Gerd is known around the Blocklist community.

Avoid the DoH list, ☹ and let me know if you need more help.

---

_[View the full topic](https://community.ipfire.org/t/memory-usage-climbing/11273)._