Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PFsense 2.3.1 on Intel 1900

    Scheduled Pinned Locked Moved Hardware
    52 Posts 11 Posters 15.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      Guest
      last edited by

      A switch is using a CPU and switch chips that are doing the work in silicon on top of this often a
      FPGA/ASIC is in use that will speed up things massively, so a bridge as a function is not the same.

      1 Reply Last reply Reply Quote 0
      • L
        lhock98
        last edited by

        so how do i test it out the ethernet controller?using what hardware to test?

        @edwardwong:

        @lhock98:

        LAN bridged opt1 and op2 = extra 2 port switch

        @edwardwong:

        @lhock98:

        been running this board for the pass few days, so far so good temperture maintained at 58-62C. opt1 and opt2 having no problem bridge to LAN. meaning  opt1and opt2 can act as a gigabytes switch.

        Nope, bridging ports together =/= switch

        The performance is never the same, bridge are software basis which takes up some cpu power while switches we are using nowadays will use ASIC + buffers to achieve much higher throughput. Another reason I do not suggest this is because of the unknown PCI-E bandwidth, the number of PCI-E lanes supported is very limited, we don't know if manufacturer is squeezing all ethernet ports in a 1x/2x/4x (PCI-E 2.0 4x max supported by J1900). Note that most Intel J1900 platform motherboard on sale right now offer only PCI-E x1 for extra devices, Intel 82583V is a PCI-E 1.0 device, which means when you have > 2 LAN ports running at full speed together will saturate the PCI-E slot. I hope the manufacturer of this firewall is assigning PCI-E x2 to all LAN chip otherwise there would be an issue. May be you can try to test it and see.

        1 Reply Last reply Reply Quote 0
        • E
          edwardwong
          last edited by

          @lhock98:

          so how do i test it out the ethernet controller?using what hardware to test?

          @edwardwong:

          @lhock98:

          LAN bridged opt1 and op2 = extra 2 port switch

          @edwardwong:

          @lhock98:

          been running this board for the pass few days, so far so good temperture maintained at 58-62C. opt1 and opt2 having no problem bridge to LAN. meaning  opt1and opt2 can act as a gigabytes switch.

          Nope, bridging ports together =/= switch

          The performance is never the same, bridge are software basis which takes up some cpu power while switches we are using nowadays will use ASIC + buffers to achieve much higher throughput. Another reason I do not suggest this is because of the unknown PCI-E bandwidth, the number of PCI-E lanes supported is very limited, we don't know if manufacturer is squeezing all ethernet ports in a 1x/2x/4x (PCI-E 2.0 4x max supported by J1900). Note that most Intel J1900 platform motherboard on sale right now offer only PCI-E x1 for extra devices, Intel 82583V is a PCI-E 1.0 device, which means when you have > 2 LAN ports running at full speed together will saturate the PCI-E slot. I hope the manufacturer of this firewall is assigning PCI-E x2 to all LAN chip otherwise there would be an issue. May be you can try to test it and see.

          I guess you can setup 3 PC on 3 bridged port, and run iperf test.

          1 Reply Last reply Reply Quote 0
          • W
            webdawg
            last edited by

            @lhock98:

            Hi bro,

            i just received my new 4 ports router from chinese seller, had been up and running pfsense 2.3.1 for the pass 4-5 days system was very well no hang no lag. total of 4 ports yet i configured 1WAN and 3 LAN all ports running well. here are the spec. power using external dc12v step down tranformer as can see from the picture

            1)intel celeron j1900 @2.0ghz
            2)2gb ddr3 so-dimm (able to support up to 8gb)
            3)8gb msata ssd
            4) 4*intel 82583v Gigabit Ethernet Controller
            5)onboard 2 msata slot and 3 sata

            Can you please post where you got it from/ link to it?

            1 Reply Last reply Reply Quote 0
            • L
              lhock98
              last edited by

              @lhock98:

              http://m.intl.taobao.com/detail/detail.html?id=37328846799&wp_m=seller_items_-1&wp_pk=shop/index_22920551_2255811&from=inshop&wp_app=weapp

              i paid sgd178 before shipping to my country

              1 Reply Last reply Reply Quote 0
              • L
                lhock98
                last edited by

                @webdawg:

                @lhock98:

                Hi bro,

                i just received my new 4 ports router from chinese seller, had been up and running pfsense 2.3.1 for the pass 4-5 days system was very well no hang no lag. total of 4 ports yet i configured 1WAN and 3 LAN all ports running well. here are the spec. power using external dc12v step down tranformer as can see from the picture

                1)intel celeron j1900 @2.0ghz
                2)2gb ddr3 so-dimm (able to support up to 8gb)
                3)8gb msata ssd
                4) 4*intel 82583v Gigabit Ethernet Controller
                5)onboard 2 msata slot and 3 sata

                Can you please post where you got it from/ link to it?

                https://item.taobao.com/item.htm?id=37328846799&_u=pke88ot3f0f

                1 Reply Last reply Reply Quote 0
                • L
                  lhock98
                  last edited by

                  is this the output result you want?my pfsense run as a server, pc as a client

                  @edwardwong:

                  @lhock98:

                  so how do i test it out the ethernet controller?using what hardware to test?

                  @edwardwong:

                  @lhock98:

                  LAN bridged opt1 and op2 = extra 2 port switch

                  @edwardwong:

                  @lhock98:

                  been running this board for the pass few days, so far so good temperture maintained at 58-62C. opt1 and opt2 having no problem bridge to LAN. meaning  opt1and opt2 can act as a gigabytes switch.

                  Nope, bridging ports together =/= switch

                  The performance is never the same, bridge are software basis which takes up some cpu power while switches we are using nowadays will use ASIC + buffers to achieve much higher throughput. Another reason I do not suggest this is because of the unknown PCI-E bandwidth, the number of PCI-E lanes supported is very limited, we don't know if manufacturer is squeezing all ethernet ports in a 1x/2x/4x (PCI-E 2.0 4x max supported by J1900). Note that most Intel J1900 platform motherboard on sale right now offer only PCI-E x1 for extra devices, Intel 82583V is a PCI-E 1.0 device, which means when you have > 2 LAN ports running at full speed together will saturate the PCI-E slot. I hope the manufacturer of this firewall is assigning PCI-E x2 to all LAN chip otherwise there would be an issue. May be you can try to test it and see.

                  I guess you can setup 3 PC on 3 bridged port, and run iperf test.

                  1 Reply Last reply Reply Quote 0
                  • D
                    dreamslacker
                    last edited by

                    @lhock98:

                    is this the output result you want?my pfsense run as a server, pc as a client

                    Nope.

                    What you need to do is hook up a computer to one of the bridged ports as a server (or client).

                    Then test iperf from another computer connected to another of the bridged ports (can be through a switch).

                    What you want to do is to test the performance when the traffic flows across pfSense from 2 of the bridged ports to determine if there is an impact to the throughput (there ought to be for this class of equipment).

                    1 Reply Last reply Reply Quote 0
                    • L
                      lhock98
                      last edited by

                      just tested 2 computers result 0-0.10 sec 1.11Gbytes 949Mbits/sec but pfsense server used up 18-20% cpu load. if i directly connected to my switch pfsense cpu will shown 0% load.

                      @dreamslacker:

                      @lhock98:

                      is this the output result you want?my pfsense run as a server, pc as a client

                      Nope.

                      What you need to do is hook up a computer to one of the bridged ports as a server (or client).

                      Then test iperf from another computer connected to another of the bridged ports (can be through a switch).

                      What you want to do is to test the performance when the traffic flows across pfSense from 2 of the bridged ports to determine if there is an impact to the throughput (there ought to be for this class of equipment).

                      1 Reply Last reply Reply Quote 0
                      • W
                        webdawg
                        last edited by

                        Intresting, do you have enough systems to do all 4 ports at once?

                        1 Reply Last reply Reply Quote 0
                        • D
                          dreamslacker
                          last edited by

                          @lhock98:

                          just tested 2 computers result 0-0.10 sec 1.11Gbytes 949Mbits/sec but pfsense server used up 18-20% cpu load. if i directly connected to my switch pfsense cpu will shown 0% load.

                          Well…  If it works...  But I don't see a point in bridging the ports though.

                          Might be better if you bond them in a Lagg group (provided the switch supports) or use the other ports with an access point as guest network and such.

                          1 Reply Last reply Reply Quote 0
                          • ?
                            Guest
                            last edited by

                            Well…  If it works...  But I don't see a point in bridging the ports though.

                            Me too! If I want to find out the routing power I don´t bridge ports together that makes them acting
                            as a switch. In the most common cases such like this, I would assume that the client and server install
                            from iPerf is each on a different PC that is sending the packets through the firewall or router, to get a
                            right result.

                            1 Reply Last reply Reply Quote 0
                            • L
                              lhock98
                              last edited by

                              @webdawg:

                              Intresting, do you have enough systems to do all 4 ports at once?

                              max is can do the test with 3 systems. what kind of setup you are interested? 1 server 2 clients?

                              1 Reply Last reply Reply Quote 0
                              • L
                                lhock98
                                last edited by

                                @webdawg:

                                Intresting, do you have enough systems to do all 4 ports at once?

                                tested today with 2 system. OPT1 set to 192.168.2.1, OPT2 set to 192.168.3.1 and run the test end up result 0-0.10 sec 1.11Gbytes 949Mbits. not much different only thing is cpu load going up to 30-42%

                                1 Reply Last reply Reply Quote 0
                                • W
                                  webdawg
                                  last edited by

                                  @lhock98:

                                  @webdawg:

                                  Intresting, do you have enough systems to do all 4 ports at once?

                                  max is can do the test with 3 systems. what kind of setup you are interested? 1 server 2 clients?

                                  I thought everyone was interested in seeing the results of bridging the ports, so far you have only saturated two at once?

                                  1 Reply Last reply Reply Quote 0
                                  • L
                                    lhock98
                                    last edited by

                                    @webdawg:

                                    @lhock98:

                                    @webdawg:

                                    Intresting, do you have enough systems to do all 4 ports at once?

                                    max is can do the test with 3 systems. what kind of setup you are interested? 1 server 2 clients?

                                    I thought everyone was interested in seeing the results of bridging the ports, so far you have only saturated two at once?

                                    my side here is getting late will test it out soon, updat to you guys.

                                    1 Reply Last reply Reply Quote 0
                                    • E
                                      edwardwong
                                      last edited by

                                      So, there will be some issue with this setup when you are putting stress on all ports.

                                      First of all, for NAT WAN-to-LAN, if you try to do up/download at full speed your CPU will take about 50% processing power, while your bridge is eating another 30-40% if both ports saturate. Your CPU is running hot and basically nothing else the firewall can do because there is no more processing power left.

                                      1 Reply Last reply Reply Quote 0
                                      • L
                                        lhock98
                                        last edited by

                                        o.k will do the test these few days.

                                        1 Reply Last reply Reply Quote 0
                                        • L
                                          lhock98
                                          last edited by

                                          @lhock98:

                                          o.k will do the test these few days. but wan to lan also depend on your internet speed hard to get the real result lan to lan should be easy to get actual speed.

                                          1 Reply Last reply Reply Quote 0
                                          • L
                                            lhock98
                                            last edited by

                                            i am using the 1G fiber internet nowadays really can't hit 1000M, when just sign up able to reach 850-950 easy easy.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.