Default Instance Type: m6i.large

For a long time, m5.large instances have been the workhorse powering bucketAV. But as technology evolves and our commitment to delivering top-tier performance and reliability deepens, it’s time for an upgrade. We’re excited to announce that m6i.large is now the default instance type for bucketAV.

This isn’t just a minor tweak; it’s a strategic move that brings significant advantages to your security workflows. Let’s dive into the four core reasons behind this transition: global availability, enhanced scan performance, superior networking, and optimized cost-effectiveness.

Default Instance Type: m6i.large

The following bucketAV versions now leverage the m6i.large instance type by default:

  • bucketAV for Amazon S3 powered by ClamAV: v2.31.0 and later
  • bucketAV for Amazon S3 powered by Sophos: v2.23.0 and later
  • bucketAV for Cloudflare R2 powered by ClamAV: v2.10.0 and later
  • bucketAV for Cloudflare R2 powered by Sophos: v2.10.0 and later

Global Reach: Wider Availability for Seamless Deployments

When you’re deploying critical security infrastructure, global availability is paramount. The m6i.large instance type is now accessible in 94% (31 of 33) of AWS regions worldwide, a notable improvement over m5.large’s 88% (29 of 33) coverage. It’s clear that AWS is prioritizing newer instance families for expansion, making m6i.large a more future-proof choice.

This broader availability ensures a smoother, more consistent deployment experience for new customers, regardless of their preferred region. While bucketAV remains compatible with older and newer instance families, setting m6i.large as the default streamlines your initial setup and provides greater flexibility.

Performance Boost: Faster Virus and Malware Scanning

In the world of security, every second counts. Our testing reveals a performance increase of over 10% when comparing m5.large with m6i.large for scanning S3 buckets. This means your files are scanned faster, and potential threats are identified more quickly.

Here’s a snapshot of our real-world performance tests using files averaging 5 MB:

  • bucketAV by Sophos: A single m6i.large EC2 instance can scan approximately 443,000 files per day.
  • bucketAV Powered by ClamAV: A single m6i.large EC2 instance can scan approximately 23,000 files per day.

This significant uplift directly translates to higher throughput for your security pipeline, allowing you to process more data with the same resources. We’ve updated our cost calculator to reflect these improved metrics.

Enhanced Throughput: Superior Network Bandwidth

Network bandwidth is often a silent bottleneck in data-intensive operations. The m6i.large instance addresses this with improved networking capabilities:

  • m5.large: 0.75 Gbps baseline / 10.0 Gbps burst bandwidth
  • m6i.large: 0.781 Gbps baseline / 12.5 Gbps burst bandwidth

This represents a 4% increase in baseline throughput and a substantial 25% jump in burst throughput. For bucketAV, this increased bandwidth is crucial, especially when handling larger files. Faster data transfer between S3 and the scanning instance means less waiting and more efficient processing of your critical data.

Cost-Effectiveness: Performance Without the Premium

When it comes to cloud resources, cost is always a consideration. We’re pleased to report that the on-demand pricing for m5.large and m6i.large remains identical at $0.0960/hour.

While there’s a slight premium for m6i.large on spot instances (starting at $0.0378/hour compared to m5.large’s $0.0351/hour – an 8% difference), the performance gains more than justify this minor increase. When you factor in the over 10% performance boost, the m6i.large offers a compelling value proposition, delivering more scanning power for a negligible cost difference.

Summary

As of today, m6i.large is the new default instance type for bucketAV’s EC2 deployments. This strategic upgrade provides you with:

  • Increased worldwide availability, simplifying deployments.
  • Better scan performance, accelerating your security workflows.
  • Enhanced network bandwidth, optimizing large file processing.
  • Comparable costs, ensuring efficiency without breaking the bank.

We’re committed to continuously improving bucketAV to meet the evolving needs of cloud security.


Published on September 2, 2025 | Written by Andreas

Stay up-to-date

Monthly digest of security updates, new capabilities, and best practices.