LinITX ALIX 2D3 LX800 (3NIC+USB) pfSense Firewall Kit

uk26

Hi,

Purchased one of these http://linitx.com/product/linitx-alix-2d3-lx800-3nicusb-pfsense-firewall-kit-red/12647

all setup and working. if doing a speedtest from the wan get the full speed of the internet connection (76mb down and 18Mb Up)

however over the IPsec VPN only get around 6mb down and 1mb up to my office.

This new hardware unite replaced a draytek which was getting around 35Mb down and 18Mb up over IPsec to the same office (also using pfsense (hosted on high spec Vmware VM) also have another IPsec VPN from Office to data centre PFsense of which gets around 70Mb up and down

so it would seem related to the new hardware from http://linitx.com/product/linitx-alix-2d3-lx800-3nicusb-pfsense-firewall-kit-red/12647

anyone else have this issue?

dotdash

The Alix is pretty modest hardware. I forget exactly how fast they can push IPSec, but did you enable the glxb under advanced, misc, crypto hardware?
You have to set the tunnels for AES 128. You can also put a hifn card in those, but the throughput is never spectacular.

stephenw10

Yep, make sure you're using one of the cyphers glxb supports:
https://doc.pfsense.org/index.php/Are_cryptographic_accelerators_supported#Benchmarks

Steve

uk26

did all of that and made no difference.

I then put in replacement a Dell Powerede T110 V2 and now get 50-60Mb Down and 18Mb Up

the website where i ordered the LinITX ALIX 2D3 LX800 from did not state it only had a 800Mhz Processor with 128MB Ram, and would not run Ipec very well so was not very impressed.

Could i ask what the expected speeds over IPsec should be on the LinITX ALIX 2D3 LX800?

stephenw10

It's in that link above.
The 2D3 (500MHz) will push ~20Mbps as long as you are using the correct cypher (AES 128bit) and have glxsb selected.
128MB though is too small to do anything useful you have issues. 256MB is the minimum.

The Alix 2D3 has a 500MHz CPU and 256MB RAM. The Dell is like a Supercomputer in comparison!

Steve