Shuttle DS57U (Broadwell & Dual Intel NICs)

FlyingBob

I'm following this topic too, since I ordered two DS57U last week (haven't arrived yet)…
I wanted to use them for pfsense with OpenVPN AES encrypted tunneling, etc... So I specifically wanted a CPU with AES-NI.

Now, yesterday 30/03/2015, I'm SURE that it was stated on the Intel ARK website that the Intel Celeron 3205U supported AES-NI.

Today, when I check the Intel ARK page again, it is simply stated that this CPU does NOT support AES-NI. Intel, what's going on?

http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz
http://oi62.tinypic.com/14t6gyb.jpg

Screenshot attached of today...

Intel screwed us?

doktornotor

@FlyingBob:

Now, yesterday 30/03/2015, I'm SURE that it was stated on the Intel ARK website that the Intel Celeron 3205U supported AES-NI.
Today, when I check the Intel ARK page again, it is simply stated that this CPU does NOT support AES-NI. Intel, what's going on?
Intel screwed us?

And here's the proof for your RMA. :P

http://web.archive.org/web/20150205185342/http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

FlyingBob

My two DS57U units arrived. I did some quick testing and I wanted to share the results (which are not too disappointing in my opinion).

I have twice the following hardware configuration:

1x SHUTTLE DS57U, Intel Celeron 3205U
1x Crucial M550 SSD 128GB mSATA (CT128M550SSD3)
2x 4 GB SO DDR3 1600 CL9 Crucial (BLS4G3N169ES4CEU)

I have installed the following software on both devices:

Debian 7.8
OpenVPN 2.3.6

I have used the following command to test the bandwith:

dd if=/dev/urandom of=/tmp/urandom.dat bs=1M count=1000
iperf -c iperf-server -F /tmp/urandom.dat

I use a random data file as source for the speed test, since the comp-lzo parameters could compress the tunnel. With the speed command above, there is no difference in results with "comp-lzo yes" or "comp-lzo no".
If an OpenVPN tunnel is used, it is a UDP tunnel.

My results are as follows:

Shuttle 1 (S1) directly attached to Shuttle 2(S2), no tunnel (no OpenVPN)
Speed: 950 Mbit/s

S1 to S2, OpenVPN, no encryption
Speed: 900 Mbit/s

S1 to S2, OpenVPN, AES-128-CBC
Speed: 210 Mbit/s

S1 to S2, OpenVPN, AES-256-CBC
Speed: 195 Mbit/s

Now I know this isn't a full firewall/router test, since I only use one interface on each device. I also haven't used FreeBSD (pfSense), since I wanted to do a quick test to see if it would be possible to obtain > 100 Mbit/s speed with AES256. It seems like this is the case.

In the near future, I plan to have this configuration set up as a complete pfSense firewall.

Heraz

The Message I got from Intel:

Hello Roland,

Thank you for your email. The AES-NI information that is currently visible on the ARK site for the Intel Celeron Processor 3205U is incorrect. The specification has been changed in our system to show that this processor does not support AES-NI and the ARK site will be updated with this information later today. We appreciate that you took the time to send us a message, and apologize for the inconvenience.

Best regards,
Lori Yung
ARK Support
ark.intel.com

kejianshi

Apologize for the inconvenience? HAHA…

How about "Send me a freaking board/CPU combo that fits my needs."

tcm10

Just wanted to say thanks to everyone on this thread.

I've been shopping for several weeks for something to replace an old power-hungry (~55 W) clunker and decided upon the new Shuttle DS57U (with 2x2 GB RAM, 60 GB SSD). I'm pleased with the initial quality, slim form factor, fanless design, and I echo everything hedsht has said, especially the ease of installation (v2.2.1).

I'd add one other con: the power button is a hair trigger.

This build is overkill for my simple home needs, but I look forward to using more of pfsense's features going forward.

@hedsht:

the shuttle has arrived and i'm happy with it.

lspci -lv (Ubuntu 14.04)
pciconf -lv (FreeBSD 10.1)

Booting from USB works without any issues, even booting from SD Card works.

Minor con's so far:

the NICs use two different drivers, one is igb0 (I211) and the other one em0 (I218LM)

no status LEDs on NICs, might bother some people

Wifi Card (RTL8188EE) is not working

it isnt possible to disable the igpu (it will use 64mb of ram)

The case is made of metal which makes it quite hard to install external wifi antenna's, but i'll try to find a good spot, swap the wifi card and install two external antenna's.

I've set PowerD to adaptive and while downloading 100mbit the cpu idle's at around 500 MHz.

PfSense GUI Screenshot

Power Usage: 11w (4 GB RAM & 64 GB SSD)

patrtech

I also have the DS57U and wanted to install pfsense as a virtual machine in ESXI. Have any of you guys tried this yet? The main problem I'm having is that ESXI 6 only shows the i218 adapter as being available. The i211 adapter is no where to be seen. I see it available as a passthrough device. I can't figure out why it won't appear as a 2nd physical nic?

VMware compatibility guide show both have drivers available in esxi 6, why won't the i211 not appear as a available adapter?:

I211 compatibility:

http://www.vmware.com/resources/compatibility/detail.php?deviceCategory=io&productid=37601&deviceCategory=io&details=1&releases=273&keyword=i211&deviceTypes=6&VID=8086&DID=1539&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc

I218-LM compatibility:

http://www.vmware.com/resources/compatibility/detail.php?deviceCategory=io&productid=37653&deviceCategory=io&details=1&keyword=i21&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc

Any ideas?

messerchmidt

even with aes-ni, those cpus can do gigabit wan and fast vpn without issue. they just have a higher load when doing a vpn without aes-ni.

with modern cpus, even the low end embedded models like the celeronj, aes-ni is or not is not an issue.

messerchmidt

a Celeron-j 1900 can do 500/500 without issue. everyone was getting that gigabyte board with dual wan for that reason.

the realtek nics seem to limit it to 700/700ish, but the cpu can do more.

basically it depends on how much you want to spend.

BBQigniter

@patrtech:

I also have the DS57U and wanted to install pfsense as a virtual machine in ESXI. Have any of you guys tried this yet? The main problem I'm having is that ESXI 6 only shows the i218 adapter as being available. The i211 adapter is no where to be seen. I see it available as a passthrough device. I can't figure out why it won't appear as a 2nd physical nic?

VMware compatibility guide show both have drivers available in esxi 6, why won't the i211 not appear as a available adapter?:

I211 compatibility:

http://www.vmware.com/resources/compatibility/detail.php?deviceCategory=io&productid=37601&deviceCategory=io&details=1&releases=273&keyword=i211&deviceTypes=6&VID=8086&DID=1539&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc

I218-LM compatibility:

http://www.vmware.com/resources/compatibility/detail.php?deviceCategory=io&productid=37653&deviceCategory=io&details=1&keyword=i21&page=1&display_interval=10&sortColumn=Partner&sortOrder=Asc

Any ideas?

I installed ESXi 6.0 on my DS57U3. I had to create a customized ESXi-ISO with http://www.v-front.de/p/esxi-customizer-ps.html and installed the net-igb and sata-xahci driver package. See http://www.v-front.de/2015/08/a-fix-for-intel-i211-and-i350-adapters.html and http://www.v-front.de/2013/11/how-to-make-your-unsupported-sata-ahci.html

Besides I passed through the Realtek WLAN-card to a Debian 8 VM with a 4.2 Kernel and set this machine up as a WLAN-AP with hostapd - http://www.cyberciti.biz/faq/debian-ubuntu-linux-setting-wireless-access-point/

This also should work for a Shuttle DH170 imho.