Shuttle DS57U (Broadwell & Dual Intel NICs)

@hedsht:

the shuttle is around 200 EURs atm in germany AND its already available

i'm going to buy one next week.

Please tell us about your experience. Is WLAN working, is it possible to install from a USB-Drive (my ZBOX made some problems), etc.

i'll, it should arrive tomorrow or on thursday.

the shuttle has arrived and i'm happy with it.

lspci -lv (Ubuntu 14.04)
pciconf -lv (FreeBSD 10.1)

Booting from USB works without any issues, even booting from SD Card works.

Minor con's so far:

the NICs use two different drivers, one is igb0 (I211) and the other one em0 (I218LM)
no status LEDs on NICs, might bother some people
Wifi Card (RTL8188EE) is not working
it isnt possible to disable the igpu (it will use 64mb of ram)

The case is made of metal which makes it quite hard to install external wifi antenna's, but i'll try to find a good spot, swap the wifi card and install two external antenna's.

I've set PowerD to adaptive and while downloading 100mbit the cpu idle's at around 500 MHz.

PfSense GUI Screenshot

Power Usage: 11w (4 GB RAM & 64 GB SSD)

Important thing to note: AES-NI doesnt seem to be supported by FreeBSD 10.1 on this Broadwell-CPU:


[2.2-RELEASE][root@firewall.lan]/root: dmesg | grep -i aes
aesni0: No AESNI support.

[2.2-RELEASE][root@firewall.lan]/root: /usr/bin/openssl engine -t -c
(cryptodev) BSD cryptodev engine
 [RSA, DSA, DH]
     [ available ]
(rsax) RSAX engine support
 [RSA]
     [ available ]
(rdrand) Intel RDRAND engine
 [RAND]
     [ available ]
(dynamic) Dynamic engine loading support
     [ unavailable ]

Ubuntu 14.04

root@ubuntu:~# cat /proc/cpuinfo
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 61
model name      : Intel(R) Celeron(R) 3205U @ 1.50GHz
stepping        : 4
microcode       : 0x13
cpu MHz         : 500.000
cache size      : 2048 KB
physical id     : 0
siblings        : 2
core id         : 0
cpu cores       : 2
apicid          : 0
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 20
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer xsave rdrand lahf_lm abm 3dnowprefetch ida arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid fsgsbase tsc_adjust erms invpcid rdseed
bogomips        : 2993.17
clflush size    : 64
cache_alignment : 64
address sizes   : 39 bits physical, 48 bits virtual
power management:

I've already chatted with the Intel-Support, they claim that the CPU itself does support AES-NI, but its up to the computer-manufacturer (shuttle) to implement it. i've contacted the shuttle support.

:(

BIOS issue, likely.

@RAND0M1ZER:

@gonzopancho:

$217 (US) + 2 x $21 for 4GB ram, + call it $8 for a 4GB SD card. $269

This .vs http://store.netgate.com/ADI/RCC-DFF-2220.aspx at $275 which has:

Why did you include 4GB of RAM to compare it to a 2GB system?

I agree with JPS.pfsense that you are being dishonest in your comparison.

Because unless I'm mistaken, you can't run a single DIMM in that board. If I'm wrong, the Shuttle is at $248. I hope you get the AES-NI fixed.

Might I add that I have no less than three junk Shuttle cases that used custom power supplies. They make OK gear but 24/7 embedded class, I don't think so. Maybe you will get lucky and it will last. Shuttle makes nice gear, just not embedded specialty gear.

And how about goodies like an M.2 slot and SIM socket. Totally purpose built machinery.

JPS.pfsense

@Phishfry:

Might I add that I have no less than three junk Shuttle cases that used custom power supplies. They make OK gear but 24/7 embedded class, I don't think so. Maybe you will get lucky and it will last. Shuttle makes nice gear, just not embedded specialty gear.

So the power supply was the reason for malfunction in all three cases?

One bad power supply and two bad motherboards. Different generations as well from G2 to K45. I really do like thier cases. This was my choice for htpc/geexbox along with Aopen slim boxes. I have had better luck with Aopen personally…

robi

What's the max speed you can achieve NATting between the two interfaces, and with what CPU usage/load?

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

Shonky

@hedsht:

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

That's not true according to Intel. Sounds like BS to me. I was about to go and buy one until hearing that…
http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

@Shonky:

@hedsht:

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

That's not true according to Intel. Sounds like BS to me. I was about to go and buy one until hearing that…
http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

i've talked with the intel support as well, the celeron does support aes-ni, but its up to the manufacturer which version he uses and apparently shuttle took the one without aes-ni in this case.

cpu.png_thumb

mobo.png_thumb

kejianshi

Was you CPU maxed out all the time?

Just because AES acceleration isn't supported on chip doesn't mean the box can't do a good job depending on bandwidth you need supported.

Not that this would be my go-to box to begin with but if I already had one, it would have to be incapable of doing the job for me to unplug it.

Shonky

@hedsht:

@Shonky:

@hedsht:

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

That's not true according to Intel. Sounds like BS to me. I was about to go and buy one until hearing that…
http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

i've talked with the intel support as well, the celeron does support aes-ni, but its up to the manufacturer which version he uses and apparently shuttle took the one without aes-ni in this case.

That doesn't really make sense. The model supports it. If there's a version that doesn't then well it's a different model surely.

@kejianshi:

Was you CPU maxed out all the time?

Just because AES acceleration isn't supported on chip doesn't mean the box can't do a good job depending on bandwidth you need supported.

Not that this would be my go-to box to begin with but if I already had one, it would have to be incapable of doing the job for me to unplug it.

What don't you like about it?

edwardwong

@JPS.pfsense:

@gonzopancho:

This .vs http://store.netgate.com/ADI/RCC-DFF-2220.aspx at $275 which has:

more clockrate (1.7GHz .vs 1.5GHz)

Atom 1,7Ghz vs. Celeron 1,5GHz - this should be a clear win for the Celeron. It's ok to list advantages of your solution, but comparing the clock rate feels like cheating in that case.

less power consumption (TDP 6W .vs 15W

€15 difference per year (24/7)

better Ethernets

Can you explain the difference?

Shuttle is only spec-ed to 40C, 2220 is spec-ed to 65C

The main advantage is, that the Shuttle system is available in Germany. Other solutions often have to be imported.

Don't just look at the names, Intel C2350 is a member of Rangeley/Avoton (Silvermount series) which has server grade quality (The fastest C2750, octa-core Atom, was tested to be almost on par with previous generation 4C8T Xeon L5520, but TDP is just 1/3).
Definitely both CPU can do 1Gbps NAT throughput, while C2350 has turbo frequency up to 2GHz to make it even faster.

@Shonky:

That doesn't really make sense. The model supports it. If there's a version that doesn't then well it's a different model surely.

i can only say, what i've been told by the shuttle support. there isnt a bios setting to enable or disable AES-NI and i've tested FreeBSD 10.1, Ubuntu 14.04 and Windows 7 and none of them showed AES-NI Support.

So its either disabled on this CPU (maybe to save power?) or my particular cpu doesnt support AES-NI.

I went back to my D2500CC as a PfSense Firewall and am using the Shuttle DS57U as a Ubuntu Webserver for web development now.

UnEsxi

Beware everything about Shuttle. I;ve used literally 50 of them in production over the years and have struck so many esoteric problems form board design faults to power supply problems (with eery different box/PSU I've had from them) and also strange case designs that make repair/replacement and moving components hard to do.

I've found their support to be appallingly lacking in almost every instance. In EU maybe it is better, in Taiwan it is not. Face saving has presented me with nothing but duplicated excuses and round robin discussions.

They are very windows centric, so using any other OS is a foreign concept and untested.

They're a but like Sony. Hardware developers that develop and test in 'Doze, and are still learning about how IMHO…

FlyingBob

I'm following this topic too, since I ordered two DS57U last week (haven't arrived yet)…
I wanted to use them for pfsense with OpenVPN AES encrypted tunneling, etc... So I specifically wanted a CPU with AES-NI.

Now, yesterday 30/03/2015, I'm SURE that it was stated on the Intel ARK website that the Intel Celeron 3205U supported AES-NI.

Today, when I check the Intel ARK page again, it is simply stated that this CPU does NOT support AES-NI. Intel, what's going on?

http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz
http://oi62.tinypic.com/14t6gyb.jpg

Screenshot attached of today...

Intel screwed us?

doktornotor

@FlyingBob:

Now, yesterday 30/03/2015, I'm SURE that it was stated on the Intel ARK website that the Intel Celeron 3205U supported AES-NI.
Today, when I check the Intel ARK page again, it is simply stated that this CPU does NOT support AES-NI. Intel, what's going on?
Intel screwed us?

And here's the proof for your RMA. :P

http://web.archive.org/web/20150205185342/http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz