4100/6100 Base or Max

[Stef93]

@RobbieTT said in 4100/6100 Base or Max:

@Stef93

There are lots of SSD options out there (B & M) key, ideally without a DRAM cache. I have Intel Optane in mine - in terms of latency and small read/writes it is way faster than the router could use and has a write-lifetime that will exceed my life remaining!

You don't need a large drive, I ran mine with a 16GB Optane (~ £10) for a bit before using a 64GB (~£50) one:

The 32GB Optane is probably the sweet-spot for pfSense use with Suricata (~£24) when purchased new. I just use used the drive sizes I had kicking around. For non-optane SSD I would go for a 128GB drive to get a reasonable lifetime out of it.

️

I live in a city where I haven’t found a single ssd pcie key b+m, there is no talk of other parameters. The only available option is yours, MEMPEK1J064GA. I always use suricata actively. ntopng, squid+squidguard, I rarely use it, I may run haproxy in the future.

[RobbieTT]

@Stef93 I cannot remember the last time I used a physical store for HDDs or SSDs. Probably not helped by the fact that my 'city' hasn't been the capital of England for a little over a 1000 years!

️

[Gertjan]

@RobbieTT

Winchester ? ( ! )

[RobbieTT]

@Gertjan said in 4100/6100 Base or Max:

@RobbieTT

Winchester ? ( ! )

No, that was about 150 years earlier and Alfred was only the King of Wessex, rather than of England. Not a bad effort from a non-Englishman though.

That said, around that time Britain included a good chunk of modern-day France.

️

[Cabledude]

@RobbieTT said in 4100/6100 Base or Max:

@Gertjan said in 4100/6100 Base or Max:

@RobbieTT

Winchester ? ( ! )

No, that was about 150 years earlier and Alfred was only the King of Wessex, rather than of England. Not a bad effort from a non-Englishman though.

That said, around that time Britain included a good chunk of modern-day France.

️

I would have guessed Winchester as well, which as I understand transformed into the capital of the whole of England, under the House of Wessex, some time after Alfred's passing. But if not Winchester, could it be Westminster?

[RobbieTT]

@Cabledude
Think of the king that actually managed some peace, despite it all being recently glued together. Oh and demonstrated his limitations to his subjects by demonstrating that he could not hold back the tide. Also the one where history rearranged his name to avoid the 'c' word...

[Cabledude]

@JonathanLee said in 4100/6100 Base or Max:

@Cabledude It is great the only time I see it MAX out on it is on system start up, reboots. Snort rebuilds take up some CPU and ram when that occurs too.

It is impressive to see this processor run with some good code like pfSense.

@JonathanLee I went with the SG-2100. The performance in terms of WAN throughput and routing is adequate but invoking the dashboard can take a lot of seconds:

• 3.5 seconds with "System Information" widget only

• every additional widget makes dash load time increase by about a second

• My usual dashboard widget layout takes 11 seconds to load. This is with SI, Disks, pfBlockerNG, Gateways, Interfaces, Services Status, ZFS and Traffic Graphs.

For comparison: my friend's SG-4100 dashboard takes 2 seconds to load and he has the same widgets that I have.

Is my dashboard load time similar to yours? Could you please either confirm or share your unit's behaviour? I am wondering if I got a melon or if this is normal for this model.
If it is normal I don't consider it to be a huge problem.

Thanks a lot in advance!

[Stef93]

@Cabledude
I'm not @JonathanLee
But I have and actively use Netgate 6100 Base (by the way, I bought an intel optane 64gb, it’s already waiting for me, I need to install it)
I can confirm that it takes a long time to load)
upd. there are a lot of widgets, a lot of things are spinning

[Cabledude]

Thank you @Stef93. Are you saying your SG-6100 takes 10 seconds to load the dash?

[Stef93]

@Cabledude
4-6s

[Cabledude]

@Stef93 thank you. Then my 11 seconds is likely to be considered normal for the much lesser specc'ed CPU of the SG-2100.

Still curious that your 6100 takes 4-6 seconds where my friend's 4100 takes only 2 seconds. His widget list is:

• System Information, pfBlockerNG, Gateways, Interfaces, Services Status and Traffic Graphs

Good chance your 6100 has more widgets or some other kind that waits for info to load ("spinning")

[Stef93]

@Cabledude
System Information, pfBlockerNG, Gateways, Interfaces, Services Status, Traffic Graphs x5
+
OpenVPN, Dynamic DNS Status, Ipsec, Disks

[stephenw10]

There is a specific fix coming for the 6100/8200 that speeds up the dashboard loading if you have the interfaces widget there and don't have any SFP modules loaded.
It's in 23.09: https://redmine.pfsense.org/issues/13911

Steve

[RobbieTT]

@Cabledude

My 6100 with Optane takes 1.91 seconds to load the dashboard over wifi.

My Xeon-D, also with Optane, takes 1.71 seconds over wifi:

I have a pretty busy dashboard and with live graphing, so it never really stops. Of course, with caching enabled and on a wired connection it will be quicker. My LAN uses SFP+ in both cases above.

[Cabledude]

@stephenw10 Hi Steve, can you confirm SG-2100 dash load time being as high as mine given these widgets:
System Information: 3,5 seconds
Disks: + 1.5 seconds
pfBlockerNG: + 0.75 seconds
Gateways: + 0.3 seconds
Interfaces: + 1.5 seconds
Services Status: + 2 seconds
ZFS: + 1 second
Traffic Graphs: +0.5 seconds

[Cabledude]

Thanks @RobbieTT . I don't recognize your screen shot as resembling a pfSense dashboard though.

[stephenw10]

If the box itself is busy then it can take a while to open the dash on the 2100. That does seem quite extreme though.

[RobbieTT]

@Cabledude said in 4100/6100 Base or Max:

Thanks @RobbieTT . I don't recognize your screen shot as resembling a pfSense dashboard though.

No, it's a timeline graph showing how long the page takes to load. The top of my dashboard looks like this:

️

[Cabledude]

@stephenw10 said in 4100/6100 Base or Max:

If the box itself is busy then it can take a while to open the dash on the 2100. That does seem quite extreme though.

No the unit is close to idle while doing these measurements.

When I simultaneously do an ISP speed test (400 down, 50 up) the dashboard will take 16 seconds to load.

[JonathanLee]

@Cabledude to log in and get to a dashboard it takes mine 8-9 seconds depending on how much it is being used. However, with the ath0 driver built for the expansion WiFi card enabled it's a lot faster. With that being said I assume the AP also factors into this. I am using a 5ghz Wi-Fi.

I have a Wi-Fi card inside the 2100

I also use a external AP most of the time because I can't access my printer or NAS with that card enabled. Again it's much more responsive when I am accessing it over the Wi-Fi on PfSense when juxtaposed to the external AP.

Try to disable ClamAV Tac support recommended it for me as it uses a lot of memory.