@davecullen86
Hey guys, many thanks for your response. The more
I look into this, the more I see so many others with the
same issue.
I have some, a couple of PC ENgines APU boards, and
I run MikroTik RouterOS, OpenWRT, pfSense on them,
all Linux comes more to 1 GBit/s with lower powered
hardware, it is a little bit more near to the hardware
due to better driver support and here and there not
so "hardware hungry", but a router and a firewall
that can be turned into a real UTM device is als not
the same! As I see it personally, you could try out as @stephenw10 was suggesting to tune your pfSense
a little here and there. With DanOS you might be getting
nearly two streams with full GBit/s on the same hardware
(PC Engines APUx), owed to DPDK capable LAN ports such
Intel i210 / i211.
As you say the issue is implicit to the PPPoE single core > factor and the clock speed of an individual core of my
small appliance.
Like me, but I was high up the cpu frequency to another
level and play now around with some other tuneable`s,
to get here and there more out of my hardware pointed
to the entire throughput. But I also know that my appliance is better cooled then other and will never goes
higher then 65 C° - 70 C°!!!! The CPU is normally capable
of 1400 MHz and runs even only at 600 MHz - 1000 MHz
and now it is running from 1000 MHz till 1400 MHz, but
if something goes wrong, I don´t complain and be angry!
I have a solution! With another identical appliance, I
have installed OpenWRT x86 and I am not getting close > to 900Mbps throughput.
And with DanOS you may be bidirectional getting fully
1 GBit/s out! But not a fully UTM in your Network!!!!!!!!
Firewall
Captive Portal with voucher system (voucher over sms)
FreeRadius with certificates and encryption
Snort or Suricata for IDS/IPS
pfBlocker-NG for less spam and other unwanted things
Squid & SquidGiuard as a caching proxy in fron of LAN
ClamAV scanning the entire network flow for viruses
(perhaps at one day WiFi a/b/g/n/ax)
Now, THIS IS good enough for me :-). So I suggest is
a good potential solution for others who are happy to
offload the PPPoE function to another inline appliance.
I run a AVM FB 7590ax in front of the pfSense and behind
I am running the pfSense firewall! No PPPoE anymore, but
double NAT situation! But all CPU cores in usage!
AVM is offering some interesting APPs (VPN, telephone,..)
Really nice to connect from outside (internet) and being secure on the LAN side!
Now I just need to work out if I can pass through
the WAN IP somehow to my PFSense :-)
1 LAN Port as "exposed host" to the WAN interface
of the pfSense firewall ("Experienced")
Double NAT Situation
Router:
network (net) 192.168.178.0/24 (255.255.255.0)
Router IP 192.168.178.1/24 (255.255.255.0)
Static IP Address to the pfSense a.e. 192.168.178.10/24
DHCP off: all IPs will be static given to the clients
pfSense:
WAN IP 192.168.178.50/24 (255.255.255.0) static IP
LAN Net: 172.xx.xx.0/24 (255.255.255.0)
LAN IP 172.xx.xx.1/24 (255.255.255.0) static IP
DHCP: on/off (Like you need it and want it)
Thanks for your help again - I really appreciate the
pointers that ultimately led me to get a working
solution.
Not that problem, you are one from xyz sitting in the same
boat. I would also have a look on another appliance if I`ll
getting more then 50 MBit/s Internet speed!!!
P.S.
Please don´t forget in the WAN setup to disable the
following point!
WAN settings.jpg
