Suricata

Ideally, each rule keyword to show its performance impact.

Could be something like three examples showing one case with low impact, one with high impact, one in between.

Should be done in such a way that can be automated, so when there are changes, they are kept up-to-date.