Tools/Suricata
Suricata
Standard open-source IDS/IPS/firewall engine with deep packet inspection, deployable inline. Most-used open-source alternative to AWS_Network_Firewall's DPI capability, typically deployed via a Gateway_Load_Balancer-style traffic-steering pattern (paired with HAProxy for the steering layer); also a narrower, network-layer alternative to Amazon_GuardDuty and Falco for threat detection.