GA-J1900N-D3V Wan Bandwidth Problems
-
So I have the following setup for my pfSense server:
Mini-ITX pfSense Firewall
Motherboard - Gigabyte GA-J1900N-D3V
CPU - Intel Celeron J1900
Ram - G.SKILL 8GB (2 x 4GB) DDR3L SO-DIMM 1333 (PC3L 10666)
SSD - PNY 240GB
PSU - SilverStone Technology 450W SFX 80 PLUS GOLD
Case - Cooler Master Elite 110
VPN - OpenVPN (Private Internet Access)I purchased this prior to obtaining Gbit Internet service and I am currently finding out that I believe I'm capped at around 350Mbps when accessing internet via my LAN. When connecting straight to the modem I get the full 950Mbps respectively. Anyone have any information on what may be causing this? Is it strictly the GA-J1900N-D3V? I did purchase a PCI Intel Pro 10/100/1000 and I only received ~200Mbps which I found to be a shock as well. I do run my network through a full OpenVPN continuous tunnel but even so the memory and cpu never reach higher than 30%.
Very frustrating because I want to utilize my full VPN tunnel on the full bandwidth i'm paying for!
Thoughts?
~K1ll3ry0
-
You're not going to get more than that via OpenVPN. You only see 30% CPU because that's an aggregate across all cores. OpenVPN is single-threaded. In reality, when you see 30% CPU usage it likely means one core is at 100% (which would show up as 25%).
If you want gigabit speeds, don't use OpenVPN.
-
You're not going to get more than that via OpenVPN. You only see 30% CPU because that's an aggregate across all cores. OpenVPN is single-threaded. In reality, when you see 30% CPU usage it likely means one core is at 100% (which would show up as 25%).
If you want gigabit speeds, don't use OpenVPN.
Thanks for the response. I should have mentioned that even with OpenVPN disabled I am still throttled at ~350Mbps throughput. What would you recommend I use?
-
Do you have any packages running (Squid, Snort, etc.)? I'd disable them and see if you're still experiencing speed issues. If all it is doing is routing/NAT I would expect the J1900 to be able to handle close to gigabit speeds.
In terms of VPN, you should be able to get full speed with IPSec though I'm not sure which providers might offer that option.
-
Do you have any packages running (Squid, Snort, etc.)? I'd disable them and see if you're still experiencing speed issues. If all it is doing is routing/NAT I would expect the J1900 to be able to handle close to gigabit speeds.
In terms of VPN, you should be able to get full speed with IPSec though I'm not sure which providers might offer that option.
I apologize, without OpenVPN I'm seeing ~600Mbps which is still mounds away from where I should be…closer though. So maybe I will take a look at ipsec too.
I'm only running the basic install without snort or squid at the moment because I've been chasing these throughput issues since I got Gigabit WAN.
-
Do you have traffic shaping disabled?
-
FreeBSD does not have great drivers for realtek NICs. You can dig around on here for some threads where people have reported better performance using drivers straight from realtek. You don't have a lot of options with only a 32 bit PCI slot for expansion (a dual port gigabit NIC will exceed the bandwidth available on the slot). So you can try the alternate driver, get different hardware, or switch to a different OS with better support for the hardware. If you're trying to drive a significant fraction of gigabit over openvpn you might as well just get different hardware because a J1900 can't do that.
-
Realtek NICs are bad and the Celeron J1900 isn't super fast. The speeds don't look that strange to me.
-
FreeBSD does not have great drivers for realtek NICs. You can dig around on here for some threads where people have reported better performance using drivers straight from realtek. You don't have a lot of options with only a 32 bit PCI slot for expansion (a dual port gigabit NIC will exceed the bandwidth available on the slot). So you can try the alternate driver, get different hardware, or switch to a different OS with better support for the hardware. If you're trying to drive a significant fraction of gigabit over openvpn you might as well just get different hardware because a J1900 can't do that.
Would you be able to recommend a Mini-ITX board with the capability of doing so? I'm also looking at using IPSEC instead as that may allow some better throughput using more of the CPU instead of the singlethreading of OPENVPN.
-
Try running at the CLI whilst testing:
top -aSHThat will show you how the loading is being used across the cores. Hit 'q' to quit and it will freeze the current output so you can copy/paste it.
Steve
-
Provided you are not ussing PPPoE It isn't that j1900 that is hurting you per say, but the combination of the realtek nic and the j1900. Pick up a intel 4x server nic on ebay i350 or something and it should take care of all your issues. I have A j1900 cpu with i211 intel nics and I am able to saturate gigabit at `40% cpu usage. If you are using PPPoE you are going to need a faster processor ghz is important here as multithreading is broken.
Edit - Just noticed you were on comcast in Boston so good news is you won't be using PPPoE. Intel nic should solve your issues..
-
Provided you are not ussing PPPoE It isn't that j1900 that is hurting you per say, but the combination of the realtek nic and the j1900. Pick up a intel 4x server nic on ebay i350 or something and it should take care of all your issues. I have A j1900 cpu with i211 intel nics and I am able to saturate gigabit at `40% cpu usage. If you are using PPPoE you are going to need a faster processor ghz is important here as multithreading is broken.
Edit - Just noticed you were on comcast in Boston so good news is you won't be using PPPoE. Intel nic should solve your issues..
How carefully did you read this thread?
- a quad port intel nic isn't going to work well in a 32 bit PCI slot
- an intel nic isn't going to do anything for VPN performance on the J1900
- he already installed an intel nic, and it made things slower (see point 1)
TLDR; an intel nic will not solve his issues
-
Get a board with an AES-NI CPU. Get Intel network cards. All your problems should go away! :)
