Suricata

In a test environment with high traffic, we were able to reproduce a performance penalty of 10-15% once filestore v2 is enabled but without using any filestore relatad signatures, no force filestore set and stream-depth value being equal or less to the global one. So it seems that even without those relevant settings/signatures there is an impact on performance.
The initial step is to research what might be the root cause and maybe there is even some room for improvement that could benefit the feature itself with options/signatures enabled.