Intel Mini-ITX Atom 8-core Hardware Build Recipe Available Here

Guest

For me, I am still running 2.2.2.

On what you are running 2.2.2? CFCard, CFast card, mSATA, HDD or SDD or…...

Are you able to install it once more again and then try it out for sure!
Are you using LAG (LACP) or IPSec VPN?

Backup Config.xml
Backup all your scripts
create a separate loader.conf.local file for custom things like boot options, or special entries

Sir Loin

I am running 2.2.2 on an SSD. I don't have any scripts. So backing up config.xml would be it, I suppose. There are a few users on my network that there isn't really a good time to do the update. May be I will try it this weekend. I would hate to go back to the old Asus router if the upgrade goes up in flames :-)

sujyo1

Here I am about to build my pf on 1u. For Max user load is 300 wireless clients no vpn clients. willing to use squid/sarg when it works.
Please advise what else should I need in this box….

http://www.ebay.com/itm/SUPERMICRO-SYS-5018A-FTN4-1U-Rackmount-Server-Barebone-FCBGA-1283-DDR3-1600-1333-/301380755396?hash=item462bb15fc4

http://www.newegg.com/Product/Product.aspx?Item=N82E16820239958

http://www.newegg.com/Product/Product.aspx?Item=N82E16820173071

Thanks

Sir Loin

Looks like the 5018A-FTN4 has the power supply and power cables you need. With the RAM and SSD you linked, the only thing I can think of is more fans if it runs too warm. 300 clients are not concurrent max, right?

sujyo1

Thanks for reply Sir Lion…
Right now about 150-175 clients. If their is +300 then this fan http://www.directron.com/ec4015sh12bp.html should work as you mention here. Do I need longer cable for this fan? I think this box already has 1 fan as shown in pic.

Sir Loin

I don't mean that if you have a lot of concurrent users you need another fan. I mean it looks like you have everything you need and the only thing I can think of is you could add more fans. I asked about your max concurrent users number only because I am not sure if this server could handle this many concurrent connections and traffic (depends on what they do). We will need feedback from someone with more experience on pfSense to tell us.

sujyo1

That's make sense…I can't find anywhere how many normal (no vpn/no gaming) concurrent clients this Atom 8-core box can handle... here my set up would be...

From ISP CABLE MODEM

WAN---Pfsense (Squid, Sarg, Corn etc packges)

LAN----SWITCH----5 Hard Wire Computers/DVR/TV...etc

OPT1---SWITCH ----10 Access Points----300 max Wireless Clients

OPT2---Future WAN2

Hope some one will help....Thanks

Guest

That's make sense…I can't find anywhere how many normal (no vpn/no gaming) concurrent clients this Atom 8-core box can handle...

This would depending on many other things and not only on the 8 Core "Rangeley" SoC alone!

structured network
VLANs & QoS
used switches (L2/3) and there performance

From ISP CABLE MODEM

Ok

WAN–-Pfsense (Squid, Sarg, Corn etc packges)

ect packages I really mean is one of the points that should be known right to come closer
because Squid & SquidGuard & Snort will be narrow down the performance of the entire pfSense box.
Or perhaps massively DPI tasks on Layer 7 are hard core narrow down the power of the SoC.

/DVR/TV…etc

Set up a DMZ with a Layer2 Switch and store these multimedia things there that the network will not be disturbed by those devices. Cisco SG200-10/20 would be right.

LAN–--SWITCH----5 Hard Wire Computers

VLAN10 privat

OPT1–-SWITCH ----10 Access Points----300 max Wireless Clients

VLAN20 WLAN, Perhaps a separate switch likes a Cisco SG300-20/28 that is able to route the VLANs by its own?
Its to offload this from the pfSense box!

Also the VLAN10 and VLAN20 are able to run then over one bigger Layer3 Switch as mentioned
perhaps a Cisco SG300 series switch with an viewing eyes for the OPT2 as WAN2!

OPT2–-Future WAN2

Why not!

10 Access Points–--300 max Wireless Clients

What WLAN APs are installed here and is this by a WLAN controller regulated and handled WLAN or not?
If the WiFi clients are only surfing, mailing or facebook using it would be not the problem,
but if they are watching YouTube or downloading massively files it would be really slow down.

sujyo1

Thanks for detail advise Bluekobold,

ect packages I really mean is one of the points that should be known right to come closer
because Squid & SquidGuard & Snort will be narrow down the performance of the entire pfSense box.
Or perhaps massively DPI tasks on Layer 7 are hard core narrow down the power of the SoC.

WAN set to DHCP. willing to use this new box for hotel. I have to keep logs of visited urls so I need only squid/sarg & still trying to make it work since 2 years in my other pf boxes (HP Thinclient 5740 for 30 to 50 clients) but never works properly. so as of now not using squid. Do not need Snort or other cup/mem hungry packages.

Set up a DMZ with a Layer2 Switch and store these multimedia things there that the network will not be disturbed by those devices. Cisco SG200-10/20 would be right.

VLAN10 privat

VLAN20 WLAN, Perhaps a separate switch likes a Cisco SG300-20/28 that is able to route the VLANs by its own?
Its to offload this from the pfSense box!

Also the VLAN10 and VLAN20 are able to run then over one bigger Layer3 Switch as mentioned
perhaps a Cisco SG300 series switch with an viewing eyes for the OPT2 as WAN2!

you are absolutely right, but in my case Due to remote site setup if switch fails VLANs config is problem, using regular GB switchs are just plug and play. Also I never use VLANs & Managed switches.

What WLAN APs are installed here and is this by a WLAN controller regulated and handled WLAN or not?
If the WiFi clients are only surfing, mailing or facebook using it would be not the problem,
but if they are watching YouTube or downloading massively files it would be really slow down.

On OPT1 (HOTSPOT 10.10.10.1/24) using engenius-600/360 APs with static IP 10.10.10.3 to 15 no dhcp. Keep few pre config APs as standby unit at location just in case any AP fail to replace with. all APs are hard wire from/to switch no POE used. Not using WLAN controller at all. pf is handling dhcp leases for all. pf rules & allias on OPT1 are controlling unwanted access to LAN & OPT2 well. Yes, there are youtube users so as of now using captiveportal.inc to control bandwidths for all users. Do not know how to share available bandwidth equally to all when network is busy. Hoping this box will do the job.

Thanks for your help

Guest

WAN set to DHCP. willing to use this new box for hotel. I have to keep logs of visited urls so I need only squid/sarg & still trying to make it work since 2 years in my other pf boxes (HP Thinclient 5740 for 30 to 50 clients) but never works properly.

If you are able to read the German language here are two tutorials about HotSpot with Captive Portal
and VLANs with pfSense, the config must only be typewritten by yours.

pfSense HotSpot with Captive Portal
Setup VLAN & routing with pfSense

you are absolutely right, but in my case Due to remote site setup if switch fails VLANs config is problem, using regular GB switchs are just plug and play. Also I never use VLANs & Managed switches.

Your main question was, could the C2758 board handle the traffic for ~300 WiFi clients, is this right?
And now I would only telling you that you can do some things, if this is not the case, to come closer
to reach your goal!
WLAN APs from UBNT and their Controller Software, free of charge, will be able to handle this
Load a little bit better and then combined with a Cisco SG300-28 Switch and VLANs it would
perhaps no problem.

Do not know how to share available bandwidth equally to all when network is busy.

VLANs & QoS (is also prioritize the network traffic)
traffic shaping (from switch side balancing out the load)
WiFi controller (is balancing out the entire clients load)
Layer3 Switch (is doing the LAN/WLAN routing)

wiregen

I wanted a more power efficient pfsense box so I saw this thread with this build guide.

My previous PFSense box. An i5-2500k, 8gb ram, dual intel NIC

I was about to get my full gig up and down from Centurylink with it doing there speed test.

With this machine, I can't get past 700mbps but my upload I'm hitting 930mbps

I thought this could be Century link but I put my i5-2500k box in to double check and I'm getting 940mbps up and down constantly.

This is running the latest version of pfsense. Any help would be greatly appreciated.

I've read WAN-NAT is based on single core speed. Would getting an G3258 be good for this? It's just for my apartment. 5-10 devices connected at a time.

Guest

My previous PFSense box. An i5-2500k, 8gb ram, dual intel NIC

This CPU is running @3,7GHz and not on 2,4GHz so it would not be fair and able to compare against.

I was about to get my full gig up and down from Centurylink with it doing there speed test.

For sure this CPU is also playing in a total other range or class of CPUs.

With this machine, I can't get past 700mbps but my upload I'm hitting 930mbps

Pending on the turned on features, activated and installed packets and also offered services this
could easily be. But once more again, comparing an Intel Core i5-2500k against an smaller Intel
Atom SoC is not really wise! An Atom core is not a i5 core and a i5 core not an Xeon core!
This might be looking for many persons as it its the same, but trust me please it isn´t.

I thought this could be Century link but I put my i5-2500k box in to double check and I'm getting
940mbps up and down constantly.

For sure it is a really powerful and good working CPU.

This is running the latest version of pfsense. Any help would be greatly appreciated.

What could be helped there? I am pretty sure that the an Intel Atom C2758 SoC based board is capable
to route 1 GBit/s at the WAN port. But it is more the question what is all enabled at the WAN port?

Snort
Squid & SquidGuard
DPI Layer7 filter
endless firewall rules

Or is this a plain and full install on a SSD/HDD without any other services and installed packets?
Please have a look at the dashboard systeminformation at the CPU information and tell us please
what kind of GHz you will see there? Is it @2,4GHz?

Is this a really Supermicro C2558 or C2758 board or "only" a C2358 board that is not capable to
pull full 1 GBit/s?

I've read WAN-NAT is based on single core speed.

Not more anytime, since version 2.2.x pfSense was doing a bigger jump forward on this
and this was also not the last jump as I see it right.

Would getting an G3258 be good for this? It's just for my apartment. 5-10 devices connected at a time.

An Intel Celeron G3260T @3,2GHz is capable to route 1 GBit/s fine without any problems and lets you run
pfSense and Snort together and one or two VPN tasks.

wiregen

I appreciate the reply. Right now I'm running both machines bare no packages. The reason why I went with the supermicro is because I thought the i5 was overkill for apartment use.

I did transfer the config from my i5 machine to this current machine. I'm wondering if I should do a clean install instead of transferring the config over.
I'll dive into it further. To me it does seem odd that it can hit 900+ mbps on the upload but only go down 700mbps on the download.

Regarding the hardware, this is the Supermicro A1SRi-2758f with 1x 8gb of the Kingston ECC ram with a 64gb SSD. I also updated the bios so it's current and did a bios reset to make sure nothing was turned off (this was a 2nd hand board I bought on ebay for $220)

wiregen

After starting over again with a fresh install, checking and double check my config. Running 0 packages. I can say this can't fully saturate gigabit fiber with centurylink. I am only getting 700mbps down but the uplink I can get 930mbps.

This I believe is in line with PFsense's own box. http://store.pfsense.org/C2758/
TCP 940mbps UDP 756mbps

I have a spare machine with an intel G3258. I'm going to experiment and see if this would be a viable solution to saturating a gigabit fiber line.

I'm still going to keep this atom box around. Maybe optimizations in quickconnect or optimizations in next version of pfsense could help.

Downloadski

I have all the parts in except the fans (on route from the usa to me as i could not get 40 mm pwm fans locally)
Without fans it runs at about 42-43 degrees idle stacked on top of an intake fan of an other pc so there is some airflow through the case. Might put 80 mm pwm fan on top of the m350 case blowing air in without the top cover on to have some air flow over the mainbord while testing untill 40 mm fans arive.

Only issue i had was to source the cable for the ssd from the male molex on the board. Bought some extention cable with multiple sata and molex connectors and removed the connectors i do not use. (Female molex and 2 x sata power left) this was a 4€ Cable.

I like the setup very much till now, compact case, good power connection with the 4-pin mini din.
Will test it in front of my own pc till i have all the packages running like i want till i have my family run over it :) live with 3 females under the same roof, and if youtube and facebook not work i have to seek for cover ;)

update:fans have arrived and indeed can go loud, but not loud when system booted up, so very nice fans. Temperature idle is now at 26 degrees celcius in a room that is 22-24 degrees.

crashnburn

@robi:

@Jason:

There's something wrong with your build, or your climate, if you're at 70C. You really don't need multiple fans. In some installs you won't need any at all.

It's the climate. I've got two of these motherboards (in different cases, one of them is the 1U Rack case from Supermicro itself) and they both run at 70C temperature. None of these boxes operate in air conditioned server rooms.
Throwing a fan on top of them reduces temperature drastically.

Hmm.. ur speedtest shows Hungary/ Budapest. Fast speeds.. are they expensive?
How does it get so hot in Budapest?

robi

I pay about 23 USD / month for 1Gbit/200Mbit + 150 digital TV channels + landline phone.

Jailer

@robi:

I pay about 23 USD / month for 1Gbit/200Mbit + 150 digital TV channels + landline phone.

Why does the US suck so bad when it comes to internet. :'(

My 4M/1.2M WISP is $60/month. Satellite TV $85/month. 2 cell phones $118/month.

Downloadski

@Jailer:

@robi:

I pay about 23 USD / month for 1Gbit/200Mbit + 150 digital TV channels + landline phone.

Why does the US suck so bad when it comes to internet. :'(

My 4M/1.2M WISP is $60/month. Satellite TV $85/month. 2 cell phones $118/month.

Because of things like this: http://venturebeat.com/2014/02/21/verizon-closes-130b-deal-to-buy-out-vodafones-stake-in-verizon-wireless-today/
I assume telcos like these want this amount of money back from the consumers ($130 billion)

Downloadski

Ok testing the setup now. Only routing between wan and lan (is inside my network for test) no packages, i see 10-11% load when doing 500-540 mbps from usenet down.
System and cpu temperature stays on 30 degrees (celcius) in a room that is 23 degrees.

With Snort activated on WAN interface with ET rules it goes up to 24%

File copy from PC to NAS through the firewall at 105/106 MB/sec puts the CPU load at 38%
That is not bad at all i think.