Netgate 6100 with 2GB Symmetric Connection...

dan2112

Hi all,

I will be getting a 2GB symmetrical fiber connection to one of my homes. I also connect two homes with an IPSec Tunnel that will be nailed up. There is a VPN server, but that is only used very sparingly when on the road.

Will the 6100 be able to handle a full 2GB symmetrical connection, L3 routing between VLANs, NAT firewall, and IPSec between two homes.

The IPSec max connection throughput between the homes will be 1GB.

Do you think the 6100 would be able to handle this?

On the 6100 I would configure one 10GB port to be the WAN and the other 10GB port to be the LAN (I think this is supported per search here). All connections inside the house will be 10GB.

Regards,
Dan

michmoor

@dan2112 Sustained 2Gbps? Then No.
Specs on netgates site has the following for IPsec.
IMIX Traffic: 552 Mbps

For IP routing it shouldnt be any issue
IMIX Traffic: 6.08 Gbps

I cant speak for your workloads BUT if you really feel that throughput is a factor and you need sustained 2Gbps and higher than your only optoin is TNSR.

OR...you can get a 1541 which is a nice add. IPsec throughput..
IMIX Traffic: 1.77 Gbps

stephenw10

Yes, it will pass 2Gbps on the WAN no problem. Yes, it is capable of passing 1Gbps over IPSec.

However at those speeds the actual throughput you will see is very latency dependent for many protocols. So be aware that if you're seeing 200ms ping times across the tunnel currently (probably not!) you won't see 1G whatever hardware you put there.

If you're actually passing 2Gbps up and down simultaneously, 4Gbps total throughput, that's going to be close to or at the maximum I would expect.

Steve

dan2112

@stephenw10

Thanks Steve,

At the end of the day I want to be able to utilize my bandwidth with some IPSec Traffic going between the homes. Right now that ping is around 20ms, but that is before fiber install. I am in the planning phase right now just don't want to have to upgrade again for a bit. I have an older 3100 which is serving me OK now, but it wont handle this load. If I get 500Mbits of IPsec Traffic and can still max out the connection (1.6 Gbps) with other things (non IPSec) I would call that good. Hope that helps.

Dan

stephenw10

I would expect to do both those things easily with the 6100. The hardware is certainly capable of more than that.

Steve

dan2112

@stephenw10

Interesting I asked sales this question and they are pushing me toward an 8200.
Thoughts ?

Dan

stephenw10

If you need 2Gbps symmetric, 4Gbps total, I would consider the 8200.