C2758 vs C3758 for Gigabit VPN?
-
For max speed, ipsec.
-
For max speed, ipsec.
I'm happy to use ipsec. I just need to find a CPU that can do 1Gbps ipsec.
-
Building or buying? If you want to buy one, the pfsense admins know exactly which netgate systems can do it.
-
Building or buying? If you want to buy one, the pfsense admins know exactly which netgate systems can do it.
Building. I just need the CPU/MoBo combo to replace my a J1900 in one of the two sites as I have the rest of the parts for everything already in place (RAM, SataDOM, Chassis, PSU, etc.).
-
So, you need a mobo and a cpu? Whats your feeling about power use and fans?
-
So, you need a mobo and a cpu? Whats your feeling about power use and fans?
As my OP states I'm looking for as low power as possible. I have a spare Xeon D-1508 board I could use which is 25w aCPU but that's about as high on the TDP I want to go.
-
https://forum.pfsense.org/index.php?topic=127757.msg707310#msg707310 (confirmed to work)
I'd consider the Intel Core i3-7350K @ 4.20GHz since it is one of the fastest single thread cpus you can get. Make sure the board supports it. And the power.
-
Never tested with ipsec that I can tell, but anything with that much guts for openvpn is going to max out a 1gb wire speed.
-
I have an i3-6100 in another system that I could rearrange and use but was hoping to avoid using something that powerful. This system is going to be sitting in the basement of my parents house with no cooling.
Maybe I'll setup a test bed between the i3-6100 and the C2758 and see what results I get.
-
My method is like this… In situations like that where you want big performance.
Put it in a normal PC case. Use a fanless power supply.
Attach a way over kill heat sink like you might use on a 130w processor. Attach a fan.
Attach a fan to the PSU anyway...
Put in a case fan...
It will be ice cold and if all the fans fail it will keep working anyway.
The one I'm using now is very old and is just such a setup. Also sitting in the basement of my house in maryland. Not touched in 5 years.
Fanless is better if you have the money.
-
Like this….
It will never ever get hot...
 -
Haha nice, yea that thing is good to go.
This project is really get out of hand and over budget unfortunately. This all started when both mine and my parents go Gigabit fiber which is allowing me to move my local backup server off-site to their house (Site B) for weekly backups. Buying a new CPU/MoBo combo to replace the current J1900 I have there in Site B and just slapping it into the current NUC sized Mini-ITX case was really the plan. That plans is clearly that's going off the rails now.
Maybe I need to rethink what my actual needs are. As much as I'd like to saturate my gigabit link, if I can even get 50MB/s file transfers that would probably suffice.
-
I get gigabit throughput with about 60% processor using an old celeron. Similar setup to what I just told you about. $75
That board you said you have laying around will do it…. Just strap on a huge heatsink, just to be sure.
-
Yeah - the Intel Xeon D-1518 is only 35w. And has AES-NI support. You have what you need already.
-
I get gigabit throughput with about 60% processor using an old celeron. Similar setup to what I just told you about. $75
That board you said you have laying around will do it…. Just strap on a huge heatsink, just to be sure.
You get gigabit throughput across a Site-to-Site VPN? If so, with what settings?
-
Yeah - the Intel Xeon D-1518 is only 35w. And has AES-NI support. You have what you need already.
I have the Xeon D-1508, not 1518. Half the cores/threads.
-
No Havent not test with ipsec. However, I've seen people test 8 core atom boards with less guts than your board and get gigabit speed.
Its not hard to beat them as long as you have good per core performance, 2 or more cores and compatible gigabit NICs.
It just gets hard and expensive when you try to do it with a fanless computer the size of a couple packs of cigarettes.
-
No Havent not test with ipsec. However, I've seen people test 8 core atom boards with less guts than your board and get gigabit speed.
Its not hard to beat them as long as you have good per core performance, 2 or more cores and compatible gigabit NICs.
It just gets hard and expensive when you try to do it with a fanless computer the size of a couple packs of cigarettes.
Wait, I'm confused. So the C2758 SHOULD do close to 1Gbps IPsec? Because if it does than that solves all my issues.
-
https://store.netgate.com/pfSense/C2758.aspx
160
-
https://store.netgate.com/pfSense/C2758.aspx
160
However, I've seen people test 8 core atom boards with less guts than your board and get gigabit speed.
What 8 core atom board are you referring to then?