Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Questions about 10 gbps nics

    Scheduled Pinned Locked Moved Hardware
    35 Posts 8 Posters 7.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Ha! Well it depends if you need the throughput. I have an OpenVPN server running here at home to use for remote access and my hardware is way too old to support Quickassist. It's still fast enough to stream Dr Who to America though so that's fine (if you ask my sister!). Fast enough to secure my traffic when I'm using public wifi also.

      Steve

      1 Reply Last reply Reply Quote 0
      • K
        Keljian
        last edited by

        @kroberts:

        I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

        The software doesn't support it yet but it will, I'm guessing soon.

        Aes-ni is more than enough for a good proportion of vpn use..

        1 Reply Last reply Reply Quote 0
        • K
          kroberts
          last edited by

          When did girls start watching Dr. Who?!!?  I've never heard of such a thing.

          Technically I don't "need" acceleration, but if you're buying hardware in anticipation of gigabit Internet and want a VPN which can even come close to that speed, you're going to need at least AES-NI.

          I'm a bit too suspicious to put all my eggs in that one basket for encryption acceleration though, which is why I'm so excited about QAT.  I also have a significant need for compression acceleration.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            @kroberts:

            When did girls start watching Dr. Who?!!?  I've never heard of such a thing.

            When they started giving the role to actors like David Tennant and Matt Smith.  ::)

            Steve

            1 Reply Last reply Reply Quote 0
            • V
              vsxi-13
              last edited by

              @stephenw10:

              PCIe is serial is just not over single communication medium like, say, 10base2 Ethernet.
              I think Jim was pointing out that 10Gbit Ethernet is not half duplex unless presumably you've wired it very very wrong.  ;) A simple misunderstanding.
              In fact my earlier post was incorrect. I said 4 lanes of PCIe 2.0 would give you 16Gbps total but in fact that's in both directions. So a 4X slot could saturate a 10Gb Ethernet link in theory if nothing else throttles the data.

              Steve

              I could be wrong, but I thought half duplex only worked with 10BaseT and 100BaseT networks.  As soon as we got to 1000BaseT, if the connection isn't running in full duplex it, it isn't functioning at all.

              Regardless, I find this thread to be a very interesting read.

              1 Reply Last reply Reply Quote 0
              • K
                Keljian
                last edited by

                Forget half duplex, what I was getting at was that you won't see the full bandwidth if you don't have the bandwidth over a PCI-e slot

                1 Reply Last reply Reply Quote 0
                • ?
                  Guest
                  last edited by

                  @kroberts:

                  I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

                  The software doesn't support it yet but it will, I'm guessing soon.

                  http://www.dumpaday.com/?attachment_id=58505

                  1 Reply Last reply Reply Quote 0
                  • ?
                    Guest
                    last edited by

                    @Keljian:

                    @kroberts:

                    I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

                    The software doesn't support it yet but it will, I'm guessing soon.

                    Aes-ni is more than enough for a good proportion of vpn use..

                    Probably, and it's the best you can get right now, so…

                    1 Reply Last reply Reply Quote 0
                    • ?
                      Guest
                      last edited by

                      @vsxi-13:

                      @stephenw10:

                      PCIe is serial is just not over single communication medium like, say, 10base2 Ethernet.
                      I think Jim was pointing out that 10Gbit Ethernet is not half duplex unless presumably you've wired it very very wrong.  ;) A simple misunderstanding.
                      In fact my earlier post was incorrect. I said 4 lanes of PCIe 2.0 would give you 16Gbps total but in fact that's in both directions. So a 4X slot could saturate a 10Gb Ethernet link in theory if nothing else throttles the data.

                      Steve

                      I could be wrong, but I thought half duplex only worked with 10BaseT and 100BaseT networks.  As soon as we got to 1000BaseT, if the connection isn't running in full duplex it, it isn't functioning at all.

                      Regardless, I find this thread to be a very interesting read.

                      Half-duplex gigabit links connected through hubs are allowed by the specification(*), but the relevant sections of the specification is not updated anymore and full-duplex is used exclusively with switches.

                      (*) A single repeater per collision domain is defined in IEEE 802.3 2008/2012 Section 3:41

                      1 Reply Last reply Reply Quote 0
                      • ?
                        Guest
                        last edited by

                        @stephenw10:

                        I have an OpenVPN server running here at home to use for remote access and my hardware is way too old to support Quickassist.

                        I suspect this will change soon enough.

                        1 Reply Last reply Reply Quote 0
                        • ?
                          Guest
                          last edited by

                          Hello kroberts,

                          perhaps some informations interesting for you?
                          New Boards with build in Dual 10 GbE or SFP+

                          • Tyan S5530
                          • ASRock Rack D1540D4X
                          • Supermicro X10SDV-TLN4F and X10SDV-F

                          Do you know HotLave?
                          They are producing 1 GB, 10 GB and 40 GB Intel based NICs!

                          • HotLava MultiPort NICs

                          One tip of me by side to you, build with the D-1500 based boards a pfSense based
                          firewall and with the Xeon E3 a NAS or Server, but please don´t connect the
                          pfSense based firewall direct over 10 GBit/s this will be not the best effort for the
                          throughput, you will be better going with a Infinion SX2 card, that can be connected
                          directly from the pfSense based firewall to the NAS and it will be serving more speed
                          and throughout as the 10 GBit/s SFP+ option as I see it right.

                          1 Reply Last reply Reply Quote 0
                          • ?
                            Guest
                            last edited by

                            @BlueKobold:

                            Hello kroberts,

                            perhaps some informations interesting for you?
                            New Boards with build in Dual 10 GbE or SFP+

                            • Tyan S5530
                            • ASRock Rack D1540D4X
                            • Supermicro X10SDV-TLN4F and X10SDV-F

                            Do you know HotLave?
                            They are producing 1 GB, 10 GB and 40 GB Intel based NICs!

                            • HotLava MultiPort NICs

                            One tip of me by side to you, build with the D-1500 based boards a pfSense based
                            firewall and with the Xeon E3 a NAS or Server, but please don´t connect the
                            pfSense based firewall direct over 10 GBit/s this will be not the best effort for the
                            throughput, you will be better going with a Infinion SX2 card, that can be connected
                            directly from the pfSense based firewall to the NAS and it will be serving more speed
                            and throughout as the 10 GBit/s SFP+ option as I see it right.

                            We'll likely be moving to Xeon-D (Supermicro at first, something better to follow).

                            All the HotLava 10Gbps NICs appear to be based on Intel 82599ES.  These work, but don't work as well as Fortville (Intel) or T5 (Chelsio).

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.