Supermicro Intel C2758 system optimization
-
Hi forum!
I am new with pfsense. I bouht a supermicro system with a 8core C2758 Atom and a S3700 Intel SSD.
What optimization actions are reasonable?
- I switched the ram disk on with 200/300 MBs and 4 hour backup
- also AES-I is on, and Thermal Sesnors are switch to Intel Core CPU
- what is PowerD? Should this be set to on?
- MBUF are set to 1.000.000
- I activated trim - the S3700 doesn't need this, but perhaps its better?
Any other stuff to do?
Thanks
Best regards
Archimedes -
Hi forum!
I am new with pfsense. I bouht a supermicro system with a 8core C2758 Atom and a S3700 Intel SSD.
What optimization actions are reasonable?
- I switched the ram disk on with 200/300 MBs and 4 hour backup
- also AES-I is on, and Thermal Sesnors are switch to Intel Core CPU
- what is PowerD? Should this be set to on?
- MBUF are set to 1.000.000
- I activated trim - the S3700 doesn't need this, but perhaps its better?
Any other stuff to do?
Thanks
Best regards
ArchimedesMaybe increase the mbfu… My motherboard seemed to become sluggish.
https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards
-
mbuf is set to 1.000.000 - is this enough?
-
mbuf is set to 1.000.000 - is this enough?
I would say so, you don't want to set it to high. What does your interface say about your mbfu usage? It all depends on how much ram your box has installed.
-
The box has 8GB, at the moment it is at 3% - with 10 Mbps.
But typical this could be 100-300 Mbps. -
Your mbfu is just fine then, I have mine set to 1.000.000 also.
powerD is useful for conserving power and trying to some some $$ or it could be used to use more power when needed for heavy usage. If you read the description it explains it pretty well.
-
Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8) -
I have powerd enabled on my C2758 system. Works perfectly.
-
@BlueKobold:
Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)if you are in the USA - http://www.amazon.com/Comtech-AHA363PCIE0301G-Compression-Decompression-Accelerator/dp/B00NJ20I4Y
with aes-ni, you may not really need this card
-
@messerschmidt
with aes-ni, you may not really need this card
If you are using AES-NI together with IPSec VPN it could be, but the most
peoples are using it with OpenVPN! -
@BlueKobold:
Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)if you are in the USA - http://www.amazon.com/Comtech-AHA363PCIE0301G-Compression-Decompression-Accelerator/dp/B00NJ20I4Y
with aes-ni, you may not really need this card
When we enable QuickAssist, you won't want it, because QAT is faster than this card.
-
Perhaps offtopic, but which Encryption algorithms uses the new chipset?
AES? AES256-GCM? -
@gonzopancho:
@BlueKobold:
Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)if you are in the USA - http://www.amazon.com/Comtech-AHA363PCIE0301G-Compression-Decompression-Accelerator/dp/B00NJ20I4Y
with aes-ni, you may not really need this card
When we enable QuickAssist, you won't want it, because QAT is faster than this card.
Nice to hear from you about that! Really interesting, I am waiting for the QA implementation.
-
Perhaps offtopic, but which Encryption algorithms uses the new chipset?
AES? AES256-GCM?Although AES-NI is specifically designed for AES-GCM it is my understanding that it can also provide acceleration for AES-CBC. I am not sure exactly what quick assist will accelerate, but pfSense does not support it yet anyway.