Suricata

This might not be so clear to folks, and our documentation only mentions
in to indicate that it is possible to enable Suricata to inspect such flows.

We could probably add a section elaborating more on what that means.
Not sure if this should be done for userguide, devguide or both...