C2758 vs C3758 for Gigabit VPN?
-
Site A: Avoton C2758 (AES-NI)
Site B: Celeron J1900 (no AES-NI)The J1900 is a no go long term due to future AES-NI requirement.
The C2758 might not be very fast with just 1 tunnel. But Its total power for doing lots of things at one is really nice.
For this task I like the old xenon processor and board you talked about. You have one right? Just as long at it supports AES-NI.
You wouldn't want to use the j1900 and just have to pull it back out in a year.
-
Site A: Avoton C2758 (AES-NI)
Site B: Celeron J1900 (no AES-NI)The J1900 is a no go long term due to future AES-NI requirement.
The C2758 might not be very fast with just 1 tunnel. But Its total power for doing lots of things at one is really nice.
For this task I like the old xenon processor and board you talked about. You have one right?
I have the following two CPU/board combos available. I'd prefer not to use the Xeon D since it has an on board LSI HBA able to support 16 drives that will be waisted in a pfSense box. And the i3 board I have wouldn't really work since it only has a single onboard NIC so I'd have to buy an PCIe NIC and a new case. I could take the i3 and find a different board for it but it's hard to find mini-itx i3 boards that have multiple NICs.
Xeon D CPU/board: https://www.supermicro.com/products/motherboard/Xeon/D/X10SDV-2C-7TP4F.cfm
i3-6100 CPU: https://ark.intel.com/products/90729/Intel-Core-i3-6100-Processor-3M-Cache-3_70-GHz
ASRock Board: http://www.asrock.com/mb/Intel/H110M-ITXac/ -
Sent you a PM… Let me know what you think.
-
You are not going to get anywhere close to the speed you want without buying faster hardware. But the combination of the xenon and the atom will be the fastest and most supported moving forward.
Otherwise, the cheapest and fastest I can think of today is new I3 based pfsense on both sides and I still don't know if it will max your connection. I'd bet it can.
But then there is the budget…
-
You are not going to get anywhere close to the speed you want without buying faster hardware. But the combination of the xenon and the atom will be the fastest and most supported moving forward.
Otherwise, the cheapest and fastest I can think of today is new I3 based pfsense on both sides and I still don't know if it will max your connection. I'd bet it can.
But then there is the budget…
I think I'm going to try the i3-6100 I have with the C2758 and see what kind of speeds it can push. If I'm unhappy with it, I'll upgrade the C2758. That's about as far as I'm willing to push the budget for this project.
-
Test it on a table through a switch before you install it.
Mine is right here:
https://www.cpubenchmark.net/cpu.php?cpu=AMD+Athlon+64+X2+Dual+Core+4800%2B
I will eventually upgrade it when it either dies or my bandwidth overpowers it. 60/60 is nothing for it.
-
Mainly using Veeam. I'll map my offsite backup server as a backup repository in Veeam and do direct snapshot backups to it. I also backup my PC images and documents that go to my onsite storage server. So from there I can either do SMB file transfers or rsync since both servers are Linux based.
The reason I asked is that if it were just using ssh/rsync I'd say skip all this farting around with VPNs and just port forward ssh. You can get ~600Mbps with ssh on a c2758. Given that you don't have a hard performance requirement, I mostly think you're overthinking this. Even with a VPN the C2758 will work fine.
-
Mainly using Veeam. I'll map my offsite backup server as a backup repository in Veeam and do direct snapshot backups to it. I also backup my PC images and documents that go to my onsite storage server. So from there I can either do SMB file transfers or rsync since both servers are Linux based.
The reason I asked is that if it were just using ssh/rsync I'd say skip all this farting around with VPNs and just port forward ssh. You can get ~600Mbps with ssh on a c2758. Given that you don't have a hard performance requirement, I mostly think you're overthinking this. Even with a VPN the C2758 will work fine.
Either way I have to upgrade Site B as the J1900 will not suffice. Yes I don't have a hard performance requirement but I would like to know what the max the C2758 will do over VPN. But I'm realizing I wont' know that without testing it myself. Since Site B is less utilized that Site A (my home), I'm thinking I move the C2758 to Site B and put something at Site A that will have some headroom for the future.
-
SSH is great if if you don't need all the other things VPNs bring… Great for admin and moving files around and basic things like that.
-
SSH is great if if you don't need all the other things VPNs bring… Great for admin and moving files around and basic things like that.
I definitely prefer to use VPN for the simplicity of configuring my backups as if they are on the local network. But if speed becomes a serious factor I will definitely consider SSH+Rsync.
-
I've lived on both for years. I've yet to see a single SSH thread outperform UDP vpn.
However, if you want to move 1000 files from site A to site B you can select a lot of files and have them send 10 or 20 in parallel, each with its own tunnel and it does fairly fly.
My j1900 is pulling duty as the smarts for my kids smart TV… Works great. It would also be fine on my 60/60 connection there. Your network is just very demanding.
-
I think I've decided to move the C2758 to Site B and use the i3-6100 at Site A. Will report back my results when this is all up and running.