Supermicro Intel C2758 system optimization

lweddin1

Hi forum!

I am new with pfsense. I bouht a supermicro system with a 8core C2758 Atom and a S3700 Intel SSD.

What optimization actions are reasonable?

I switched the ram disk on with 200/300 MBs and 4 hour backup

also AES-I is on, and Thermal Sesnors are switch to Intel Core CPU

what is PowerD? Should this be set to on?

MBUF are set to 1.000.000

I activated trim - the S3700 doesn't need this, but perhaps its better?

Any other stuff to do?

Thanks
Best regards
Archimedes

Maybe increase the mbfu… My motherboard seemed to become sluggish.

https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards

archimedes

mbuf is set to 1.000.000 - is this enough?

lweddin1

@archimedes:

mbuf is set to 1.000.000 - is this enough?

I would say so, you don't want to set it to high. What does your interface say about your mbfu usage? It all depends on how much ram your box has installed.

archimedes

The box has 8GB, at the moment it is at 3% - with 10 Mbps.
But typical this could be 100-300 Mbps.

lweddin1

Your mbfu is just fine then, I have mine set to 1.000.000 also.

powerD is useful for conserving power and trying to some some $$ or it could be used to use more power when needed for heavy usage. If you read the description it explains it pretty well.

Guest

Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)

antillie

I have powerd enabled on my C2758 system. Works perfectly.

messerchmidt

@BlueKobold:

Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)

if you are in the USA - http://www.amazon.com/Comtech-AHA363PCIE0301G-Compression-Decompression-Accelerator/dp/B00NJ20I4Y

with aes-ni, you may not really need this card

Guest

@messerschmidt

with aes-ni, you may not really need this card

If you are using AES-NI together with IPSec VPN it could be, but the most
peoples are using it with OpenVPN!

Guest

@messerchmidt:

@BlueKobold:

Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)

if you are in the USA - http://www.amazon.com/Comtech-AHA363PCIE0301G-Compression-Decompression-Accelerator/dp/B00NJ20I4Y

with aes-ni, you may not really need this card

When we enable QuickAssist, you won't want it, because QAT is faster than this card.

archimedes

Perhaps offtopic, but which Encryption algorithms uses the new chipset?
AES? AES256-GCM?

Guest

@gonzopancho:

@messerchmidt:

@BlueKobold:

Comtech AHA AHA363PCIE0301G 5Gbs GZIP Compression/Decompression Accelerator Card
Shut one in the (e)Bay if you want to pimp up the machine. 8)

if you are in the USA - http://www.amazon.com/Comtech-AHA363PCIE0301G-Compression-Decompression-Accelerator/dp/B00NJ20I4Y

with aes-ni, you may not really need this card

When we enable QuickAssist, you won't want it, because QAT is faster than this card.

Nice to hear from you about that! Really interesting, I am waiting for the QA implementation.

antillie

@archimedes:

Perhaps offtopic, but which Encryption algorithms uses the new chipset?
AES? AES256-GCM?

Although AES-NI is specifically designed for AES-GCM it is my understanding that it can also provide acceleration for AES-CBC. I am not sure exactly what quick assist will accelerate, but pfSense does not support it yet anyway.