
of course, there are reasons for strict affinity rules
If you run snort, or anything else that requires its own NIC, you don't but a new nic for every host in the cluster, two or three should do fine....but this means that your snort box can now only run on the physical nodes that have this additional nic.