Should I go with a Jetway NUC?
-
Hi
I'm looking at some different solutions that are available for me and was wondering what you all thought about it.
First, I'm about to get 1000 Mbit/s fiber so I need something that can handle that speed.
I have two options that are "affordable", either the Jetway JBC320U93-2930-B or to build something my self using the Asrock C2550D4I, witch is the cheapest yet powerfull SOC mobo with Intel NICS, where I live.Links:
Jetway http://mini-pc.de/catalog/il/1893
Asrock http://www.asrockrack.com/general/productdetail.asp?Model=C2550D4I#SpecificationsI wouldn't mind getting the SG-2440 but it's like 7500kr (swedish crowns), approx $900 while the other two option are closer 2500-3000kr / $300-360, with the Jetway being the cheapest.
I plan to use Squid and maybe something else, and possibly OpenVPN but only 1-2 connections. I don't think that the N2930 SoC in the Jetway has AES-NI but I assume that it would be able to handle 1-2 connections anyway.
Would be great to get some insight from you guys.
Cheers// Martin.
-
I'm looking at some different solutions that are available for me and was wondering what you all thought about it.First, I'm about to get 1000 Mbit/s fiber so I need something that can handle that speed.
The Intel Celeron N2930 is able to push 900/920 MBit/s at the WAN port and together with NAT, passing
firewall rules and the overhead on top it might be full 1 GBit/s at the WAN Port. Others where reporting
that their Intel Celeron N2930 will be able to push 960/970 MBit/s but I really think this might be also
pending on their different configuration then.I have two options that are "affordable", either the Jetway JBC320U93-2930-B or to build something my self using the Asrock C2550D4I, witch is the cheapest yet powerfull SOC mobo with Intel NICS, where I live.
I would be preventing from both, that means not that they are bad things or faulty, but I personally would
prevent from both units.Links:
Jetway http://mini-pc.de/catalog/il/1893There are other interesting units from Jetway I would be going with, but not this small NUC with
only two LAN Ports.Asrock http://www.asrockrack.com/general/productdetail.asp?Model=C2550D4I#Specifications
This is based on the Intel Atom C2x50 ("Avoton") series and it comes with, AES-NI & TurboBoost, this might
be good for normal servers likes Apache, Samba or a NAS but for a firewall or network appliance I would more
tend to use the Intel Atom C2x58 ("Rangeley") that comes together with AES-NI & Intel QuickAssist!!!I wouldn't mind getting the SG-2440 but it's like 7500kr (swedish crowns), approx $900 while the other two option are closer 2500-3000kr / $300-360, with the Jetway being the cheapest.
Only looking on the price makes you often buying twice! So later you will be learning that not all if given
to you by this platforms, that you will be installing or running. If you want to, you oculd have a closer look
on the Varia-Store they are shipping world wide and having mostly good
prices and also fair RMA conditions. For long time customers they are working with gift cards and they sell
also SG units from pfSense, PC Engines, UBNT devices, and MikroTik routers. Also spare parts as pigtails
and antennas or miniCPie cards are available.I plan to use Squid and maybe something else, and possibly OpenVPN but only 1-2 connections.
Something else can be HAVP & ClamAV or only Snort that would be comming nearly a full featured UTM device
and I really would more tend to use another unit with other CPUs (SoCs) or on other boards.
The OpenVPN is not using AES-NI, only IPSec is actual using AES-NI.
IPSec = AES-GCM
OpenVPN = AES-CBCI don't think that the N2930 SoC in the Jetway has AES-NI but I assume that it would be able to handle 1-2 connections anyway.
For sure it will be able to realize this with ease.
Would be great to get some insight from you guys.
There are also other interesting things you might be having a look on.
According to the time you will have to wait, in Q1/2016 PC Engines will launch a new board (APU2) that will be
some differ from the actual APU series. The APU2 will come together with;- Quad Core CPU @1GHz
- 3 miniPCie & SIM slots
- Intel GB LAN Ports
- AES-NI support
- 4 GB ECC RAM
I am sure this will be on sale at the Varia-Store also really soon.
APU2B4 ~160 € (Board only) Actual not ready and in Beta phasis.
As a bundle together with a case and an external PSU it might be ending with ~200 € - 220 €If a 19" solution with more Intel GB LAN Ports is needed you coudl also have a look on this both boards;
Jetway N2930
DaugtherboardAs an alternative against the Jetway named by you above this will be a better choice in my eyes and
also better sorted. Jetway N2930 with 10 Intel GB LAN Ports.–---------------------------------------------------------------------------------------------------------------------
More as a UTM or with many packets:
If you ask me what might be the right one for you, I would really go with one of this two solutions here:
Jetway N2930 & 8 GB RAM & 64 GB mSATAMore as a firewall & snort and less packets:
Or if you can wait some weeks until this board is leaving the beta phases and is ready
APU2B4 as a bundle with case and PSU together. -
Thanks for the awesome reply.
I guess I could wait a couple of weeks but I really want something to tinker with now. Guess I have to read up on the APU2B4 and look into the Jetway JBC200F9N-E4IN-B. I think either of them would be more than enough for my needs.Thanks again!
-
mwc, my Jetway N2930 box worked well for 2-3 weeks but than started giving me memory errors. Luckily this happened within 30 days so I could return it. I couldn't test if it was the Crucial memory or the board went south. 2930 has 7.5w TDP but still I suspect heat was part of the issue. I did not place it to a well ventilated area in my office.
-
mwc, My ISP will upgrade my FTTH connection to 1Gbit in March so I am very interested in the choice you are going to make. I was looking at a Jetway JBC311U93-2930-B system to replace my current VIA Eden based pfSense box (which has only 100Mbit NICs).
For me the presents of AES-NI is optional but the most important thing is the pure routing/NAT speed. First I was looking at a Zotac ZBOX nano CI323 which is cheaper, has a faster CPU with AES-NI, but this system has Realtek NICs (which seem to max out at about 700-800Mbit on FreeBSD).
I think for pure routing/NAT speed the Jetway would be better than the PC Engines apu2b4 simple because it has a faster CPU (QC 1,83Ghz > QC 1,00Ghz). On the PC Engines website the release notes state that there are still a few problems:
BIOS is not feature complete yet, in particular -
• No boot from SD card.
• ECC not working yet.
• Boot order selection not working yet.
• iPXE module not included yet.Sekrit, thanks for the heads up. I also had pre-selected Crucial memory for the Jetway system. Now I think I am going with a Kingston HyperX Impact HX316LS9IB/4 module, it has a headspreader so it should work better with higher temperatures.
-
mwc, My ISP will upgrade my FTTH connection to 1Gbit in March so I am very interested in the choice you are going to make. I was looking at a Jetway JBC311U93-2930-B system to replace my current VIA Eden based pfSense box (which has only 100Mbit NICs).
Once more again I love the Jetway boards and bare bone PCs, they are not so cheap as from the most chinese
or Taiwan vendors and some of them have a really good reputation related to built routers or firewalls.
Bit this small device (Jetway JBC311U93-2930-B) is in my eyes not well formed and assembled to realize
it without any problems. The most benefit what I was seeing is based on this board here in any sort and art
of case.
To assemble it self:
Jetway NF9HG-2930 Thin mini-ITX Network Motherboard
M350 mini ITX caseReady to go boxes:
Jetway 4 GB Intel LAN Ports
Jetway 5 GB Intel LAN Ports
Jetway 10 GB Intel LAN PortsFor me the presents of AES-NI is optional but the most important thing is the pure routing/NAT speed.
NAT is a part of the packet filter (pf) of pfSense and pending on other reports you will see
something around 900/920 MBit/s - 960/970 MBit/s pending on the configuration I thing it
is not at all places the same WAN speed or entire throughput. So with the overhead on top
it might be coming nearly wire speed and this is actual based only on one CPU core together
with PPPoE. AES-NI is a super deal if you are using IPSec and not OpenVPN for sure.First I was looking at a Zotac ZBOX nano CI323 which is cheaper, has a faster CPU with AES-NI, but this system has Realtek NICs (which seem to max out at about 700-800Mbit on FreeBSD).
Save your money over a longer time and spend something around ~100 € till ~120 € more,
but then you will get a device that is capable to let you built a real UTM device with IDS (Snort)
Proxy (Squid), HACP (ClamAV) and for sure a pf using firewall.I think for pure routing/NAT speed the Jetway would be better than the PC Engines apu2b4 simple because it has a faster CPU (QC 1,83Ghz > QC 1,00Ghz).
It looks like or might be looking like that, but CPU core is not CPU core, or in shorter words not all CPU
and their cores can be compared against! They mostly delivering more power and speed how newer they
are! The 4 Core AMD Jaguar CPU can be more powerful as the N2930On the PC Engines website the release notes state that there are still a few problems:
But if this will be eliminated and the board is running well it could be a really challenge for peoples
that needs a device only for firewall and not other services likes IDS, Proxy and AVScan on normal
Internet speed till 200 - 500 MBit/s.If you will buy a N2930 board only likes named above you will pay ~200 €, the M350 mini ITX case
is able to buy here in Germany for araound ~45 € together with RAM, ,mSATA and an external PSU
you would be ending in the 300 € - 350 € area, but then it is running smooth and liquid for you.