Which CPU to use for 100-200 mbps site to site VPN throughput for a mini-itx?

noob12344321 · Aug 26, 2012, 4:23 PM

I'd like to build two mini-itx pfsense boxes for site to site VPN.

Motherboard:
Intel Server Board S1200KPR mini-itx with on board dual nics. $150.00

Ram:
Crucial 8GB Kit (4GBx2), 240-pin DIMM, DDR3 PC3-8500 memory module $80.00
DDR3 PC3-8500 • CL=7 • Unbuffered • ECC • DDR3-1066 • 1.5V • 512Meg x 72 •

Internal SSD:
Intel brand? Size?

CPU:
Which CPU would provide an 100 - 200 mbps site to site VPN throughput?

For fun, what would the site to site VPN throughput be using Intel Xeon Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00?

Intel Server Board S1200KPR mini-itx
http://ark.intel.com/products/67346/Intel-Server-Board-S1200KPR

CPUs that are supported on this motherboard;

Intel Xeon Processor E3-1220 (8M Cache, 3.10 GHz) $210.00 80 Watts (Newegg)

Intel Xeon Processor E3-1220L (3M Cache, 2.20 GHz) $211.00 20 Watts

Intel Xeon Processor E3-1225 (6M Cache, 3.10 GHz) $212.00 95 Watts (Newegg)

Intel Xeon Processor E3-1230 (8M Cache, 3.20 GHz) $240.00 80 Watts (Newegg)

Intel Xeon Processor E3-1235 (8M Cache, 3.20 GHz) $261.00 95 Watts (Newegg)

Intel Xeon Processor E3-1240 (8M Cache, 3.30 GHz) $265.00 80 Watts (Newegg)

Intel Xeon Processor E3-1245 (8M Cache, 3.30 GHz) $280.00 95 Watts (Newegg)

Intel Xeon Processor E3-1260L (8M Cache, 2.40 GHz) $580.00 45 Watts

Intel Xeon Processor E3-1270 (8M Cache, 3.40 GHz) $340.00 80 Watts (Newegg)

Intel Xeon Processor E3-1275 (8M Cache, 3.40 GHz) $373.00 95 Watts (Newegg)

Intel Xeon Processor E3-1280 (8M Cache, 3.50 GHz) $675.00 95 Watts

Intel Xeon Processor E3-1290 (8M Cache, 3.60 GHz) $947.00

Intel Celeron Processor G440 (1M Cache, 1.60 GHz) $40.00 35 Watts

Intel Celeron Processor G530 (2M Cache, 2.40 GHz) $50.00 65 Watts (Newegg)

Intel Celeron Processor G530T (2M Cache, 2.00 GHz) $58.00 35 Watts

Intel Celeron Processor G540 (2M Cache, 2.50 GHz) $43.00 65 Watts

Intel Core i3-2100 Processor (3M Cache, 3.10 GHz) $105.00 65 Watts

Intel Core i3-2100T Processor (3M Cache, 2.50 GHz) $138.00 35 Watts

Intel Core i3-2102 Processor (3M Cache, 3.10 GHz) $255.00 65 Watts

Intel Core i3-2105 Processor (3M Cache, 3.10 GHz) $160.00 65 Watts

Intel Core i3-2120 Processor (3M Cache, 3.30 GHz) $108.00 65 Watts

Intel Core i3-2120T Processor (3M Cache, 2.60 GHz) $108.00 35 Watts

Intel Core i3-2125 Processor (3M Cache, 3.30 GHz) $137.00 65 Watts

Intel Core i3-2130 Processor (3M Cache, 3.40 GHz) $142.00 65 Watts

Intel Pentium Processor G620 (3M Cache, 2.60 GHz) $58.00 65 Watts

Intel Pentium Processor G620T (3M Cache, 2.20 GHz) $89.00 35 Watts

Intel Pentium Processor G630 (3M Cache, 2.70 GHz) $63.00 65 Watts

Intel Pentium Processor G630T (3M Cache, 2.30 GHz) $73.00 35 Watts

Intel Pentium Processor G840 (3M Cache, 2.80 GHz) $89.00 65 Watts

Intel Pentium Processor G850 (3M Cache, 2.90 GHz) $72.00 65 Watts

Intel Pentium Processor G860 (3M Cache, 3.00 GHz) $83.00 65 Watts

Intel Xeon Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00 87 Watts

Intel Xeon Processor E3-1280V2 (8M Cache, 3.60 GHz) $640.00 69 Watts (Newegg)

Intel Xeon Processor E3-1275V2 (8M Cache, 3.50 GHz) $370.00 77 Watts (Newegg)

Intel Xeon Processor E3-1270V2 (8M Cache, 3.50 GHz) $355.00 69 Watts

Intel Xeon Processor E3-1265LV2 (8M Cache, 2.50 GHz) $330.00 45Watts (Newegg)

Intel Xeon Processor E3-1245V2 (8M Cache, 3.40 GHz) $271.00 77 Watts

Intel Xeon Processor E3-1240V2 (8M Cache, 3.40 GHz) $268.00 69 Watts (Newegg)

Intel Xeon Processor E3-1230V2 (8M Cache, 3.30 GHz) $240.00 69Watts (Newegg)

Intel Xeon Processor E3-1225V2 (8M Cache, 3.20 GHz) $235.00 77Watts (Newegg)

Intel Xeon Processor E3-1220V2 (8M Cache, 3.10 GHz) $220.00 69Watts (Newegg)

Intel Xeon Processor E3-1220LV2 (3M Cache, 2.30 GHz) $220.00 17 Watts

gderf · Aug 26, 2012, 5:06 PM

Have you considered a supported VPN accelerator card on each end instead of high end CPUs?

noob12344321 · Aug 26, 2012, 5:33 PM

From what I've read…the VPN accelerator card would slow down a high end CPU!

Also, I've read that it is a better value for over all performance to spend money on a faster CPU instead of purchasing a VPN accelerator card?

gderf · Aug 26, 2012, 6:19 PM

Maybe this information is no longer current?

From the Hardware Sizing Guidance page:

Feature Considerations
Most features do not factor into hardware sizing, though a few have significant impact on hardware utilization.

VPN - Heavy use of any of the VPN services included in pfSense will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. A 266 MHz CPU will max out at around 4 Mbps of IPsec throughput, a 500 MHz CPU can push 10-15 Mbps of IPsec, and relatively new server hardware (Xeon 800 FSB and newer) deployments are pushing over 100 Mbps with plenty of capacity to spare. Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements.

SeventhSon · Aug 27, 2012, 7:10 AM

@noob12344321:

From what I've read…the VPN accelerator card would slow down a high end CPU!

Would depend on which one you get… If you get a Xeon and a vpn1411, then, yes :)
If you get, say a DX1845, I'd say that would be faster :P

Anyway: modern Intel chips, have AES instructions built-in, should be plenty fast :D
http://en.wikipedia.org/wiki/AES_instruction_set
will be supported in 2.1:
http://forum.pfsense.org/index.php/topic,51367.msg275362.html#msg275362

Until then the i3/Xeon itself should be able to do 200Mbps, I would say, but with a bit higher cpu load.