• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Which CPU to use for 100-200 mbps site to site VPN throughput for a mini-itx?

Scheduled Pinned Locked Moved Hardware
5 Posts 3 Posters 6.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • N
    noob12344321
    last edited by Aug 26, 2012, 4:23 PM

    I'd like to build two mini-itx pfsense boxes for site to site VPN.

    Motherboard:
    Intel® Server Board S1200KPR mini-itx with on board dual nics. $150.00

    Ram:
    Crucial 8GB Kit (4GBx2), 240-pin DIMM, DDR3 PC3-8500 memory module $80.00
    DDR3 PC3-8500 • CL=7 • Unbuffered • ECC • DDR3-1066 • 1.5V • 512Meg x 72 •

    Internal SSD:
    Intel brand?  Size?

    CPU:
    Which CPU would provide an 100 - 200 mbps site to site VPN throughput?

    For fun, what would the site to site VPN throughput be using Intel® Xeon® Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00?

    Intel® Server Board S1200KPR mini-itx
    http://ark.intel.com/products/67346/Intel-Server-Board-S1200KPR

    CPUs that are supported on this motherboard;

    Intel® Xeon® Processor E3-1220 (8M Cache, 3.10 GHz) $210.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1220L (3M Cache, 2.20 GHz) $211.00 20 Watts

    Intel® Xeon® Processor E3-1225 (6M Cache, 3.10 GHz) $212.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1230 (8M Cache, 3.20 GHz) $240.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1235 (8M Cache, 3.20 GHz) $261.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1240 (8M Cache, 3.30 GHz) $265.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1245 (8M Cache, 3.30 GHz) $280.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1260L (8M Cache, 2.40 GHz) $580.00 45 Watts

    Intel® Xeon® Processor E3-1270 (8M Cache, 3.40 GHz) $340.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1275 (8M Cache, 3.40 GHz) $373.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1280 (8M Cache, 3.50 GHz) $675.00 95 Watts

    Intel® Xeon® Processor E3-1290 (8M Cache, 3.60 GHz) $947.00

    Intel® Celeron® Processor G440 (1M Cache, 1.60 GHz) $40.00 35 Watts

    Intel® Celeron® Processor G530 (2M Cache, 2.40 GHz) $50.00 65 Watts (Newegg)

    Intel® Celeron® Processor G530T (2M Cache, 2.00 GHz) $58.00 35 Watts

    Intel® Celeron® Processor G540 (2M Cache, 2.50 GHz) $43.00 65 Watts

    Intel® Core™ i3-2100 Processor (3M Cache, 3.10 GHz) $105.00 65 Watts

    Intel® Core™ i3-2100T Processor (3M Cache, 2.50 GHz) $138.00 35 Watts

    Intel® Core™ i3-2102 Processor (3M Cache, 3.10 GHz) $255.00 65 Watts

    Intel® Core™ i3-2105 Processor (3M Cache, 3.10 GHz) $160.00 65 Watts

    Intel® Core™ i3-2120 Processor (3M Cache, 3.30 GHz) $108.00 65 Watts

    Intel® Core™ i3-2120T Processor (3M Cache, 2.60 GHz) $108.00 35 Watts

    Intel® Core™ i3-2125 Processor (3M Cache, 3.30 GHz) $137.00 65 Watts

    Intel® Core™ i3-2130 Processor (3M Cache, 3.40 GHz) $142.00 65 Watts

    Intel® Pentium® Processor G620 (3M Cache, 2.60 GHz) $58.00 65 Watts

    Intel® Pentium® Processor G620T (3M Cache, 2.20 GHz) $89.00 35 Watts

    Intel® Pentium® Processor G630 (3M Cache, 2.70 GHz) $63.00 65 Watts

    Intel® Pentium® Processor G630T (3M Cache, 2.30 GHz) $73.00 35 Watts

    Intel® Pentium® Processor G840 (3M Cache, 2.80 GHz) $89.00 65 Watts

    Intel® Pentium® Processor G850 (3M Cache, 2.90 GHz) $72.00 65 Watts

    Intel® Pentium® Processor G860 (3M Cache, 3.00 GHz) $83.00 65 Watts

    Intel® Xeon® Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00 87 Watts

    Intel® Xeon® Processor E3-1280V2 (8M Cache, 3.60 GHz) $640.00 69 Watts (Newegg)

    Intel® Xeon® Processor E3-1275V2 (8M Cache, 3.50 GHz) $370.00 77 Watts (Newegg)

    Intel® Xeon® Processor E3-1270V2 (8M Cache, 3.50 GHz) $355.00 69 Watts

    Intel® Xeon® Processor E3-1265LV2 (8M Cache, 2.50 GHz) $330.00 45Watts (Newegg)

    Intel® Xeon® Processor E3-1245V2 (8M Cache, 3.40 GHz) $271.00 77 Watts

    Intel® Xeon® Processor E3-1240V2 (8M Cache, 3.40 GHz) $268.00 69 Watts (Newegg)

    Intel® Xeon® Processor E3-1230V2 (8M Cache, 3.30 GHz) $240.00 69Watts (Newegg)

    Intel® Xeon® Processor E3-1225V2 (8M Cache, 3.20 GHz) $235.00 77Watts (Newegg)

    Intel® Xeon® Processor E3-1220V2 (8M Cache, 3.10 GHz) $220.00 69Watts (Newegg)

    Intel® Xeon® Processor E3-1220LV2 (3M Cache, 2.30 GHz) $220.00 17 Watts

    1 Reply Last reply Reply Quote 0
    • G
      gderf
      last edited by Aug 26, 2012, 5:06 PM

      Have you considered a supported VPN accelerator card on each end instead of high end CPUs?

      1 Reply Last reply Reply Quote 0
      • N
        noob12344321
        last edited by Aug 26, 2012, 5:33 PM

        From what I've read…the VPN accelerator card would slow down a high end CPU!

        Also, I've read that it is a better value for over all performance to spend money on a faster CPU instead of purchasing a VPN accelerator card?

        1 Reply Last reply Reply Quote 0
        • G
          gderf
          last edited by Aug 26, 2012, 6:19 PM

          Maybe this information is no longer current?

          From the Hardware Sizing Guidance page:

          Feature Considerations
          Most features do not factor into hardware sizing, though a few have significant impact on hardware utilization.

          VPN - Heavy use of any of the VPN services included in pfSense will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. A 266 MHz CPU will max out at around 4 Mbps of IPsec throughput, a 500 MHz CPU can push 10-15 Mbps of IPsec, and relatively new server hardware (Xeon 800 FSB and newer) deployments are pushing over 100 Mbps with plenty of capacity to spare. Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements.

          1 Reply Last reply Reply Quote 0
          • S
            SeventhSon
            last edited by Aug 27, 2012, 7:10 AM

            @noob12344321:

            From what I've read…the VPN accelerator card would slow down a high end CPU!

            Would depend on which one you get… If you get a Xeon and a vpn1411, then, yes :)
            If you get, say a DX1845, I'd say that would be faster :P

            Anyway: modern Intel chips, have AES instructions built-in, should be plenty fast :D
            http://en.wikipedia.org/wiki/AES_instruction_set
            will be supported in 2.1:
            http://forum.pfsense.org/index.php/topic,51367.msg275362.html#msg275362

            Until then the i3/Xeon itself should be able to do 200Mbps, I would say, but with a bit higher cpu load.

            1 Reply Last reply Reply Quote 0
            5 out of 5
            • First post
              5/5
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
              This community forum collects and processes your personal information.
              consent.not_received