Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PC Engines apu2 experiences

    Scheduled Pinned Locked Moved Hardware
    711 Posts 73 Posters 780.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Stella_161 @Stewart
      last edited by Stella_161

      @Stewart @sToRmInG

      Thanks Guys, Ive opened a new thread for this.

      Ive tried upgrading the BIOS with no change. After the BIOS upgrade i did a factory reset, no packages have only setup PPPoe and default LAN with ad blocker enabled on PC. Still only 71Mbit~.

      CPU usage is minimal when running from PC: Speedtest.net and Fast.com with the same result

      PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
      11 root 155 ki31 0K 64K RUN 3 42:59 100.00% [idle{idle: cpu3}]
      11 root 155 ki31 0K 64K CPU1 1 42:57 100.00% [idle{idle: cpu1}]
      11 root 155 ki31 0K 64K CPU2 2 42:56 98.49% [idle{idle: cpu2}]
      11 root 155 ki31 0K 64K CPU0 0 42:42 88.96% [idle{idle: cpu0}]
      12 root -92 - 0K 496K CPU0 0 0:31 14.70% [intr{irq256: igb0:que 0}]
      12 root -92 - 0K 496K WAIT 2 0:08 5.66% [intr{irq259: igb1:que 0}]
      12 root -92 - 0K 496K WAIT 3 0:07 1.66% [intr{irq260: igb1:que 1}]

      161481d5-6124-4fec-8cfa-dee502d4a2cb-image.png

      CPU when running Speed Test CLI on pfsense:

      PID USERNAME PRI NICE SIZE RES STATE C TIME WCPU COMMAND
      11 root 155 ki31 0K 64K CPU1 1 47:13 86.77% [idle{idle: cpu1}]
      11 root 155 ki31 0K 64K RUN 3 47:12 82.57% [idle{idle: cpu3}]
      11 root 155 ki31 0K 64K CPU2 2 47:09 79.88% [idle{idle: cpu2}]
      11 root 155 ki31 0K 64K RUN 0 46:46 71.29% [idle{idle: cpu0}]
      12 root -92 - 0K 496K WAIT 0 0:50 33.25% [intr{irq256: igb0:que 0}]
      52611 root 74 0 135M 71416K CPU3 3 0:02 7.96% /usr/local/bin/python3.7 /usr/local/bin/speedtest{python3.7}

      3508b2c2-2d77-47f8-8ff7-52e409ba97f3-image.png

      Cheers

      QinnQ 1 Reply Last reply Reply Quote 0
      • QinnQ
        Qinn @Stella_161
        last edited by Qinn

        @Stella_161 Just to be sure, did you halt the system and then pulled the power plug, wait for a minute and then re-plug the power, this should be done after every bios update.

        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
        Firmware: Latest-stable-pfSense CE (amd64)
        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

        1 Reply Last reply Reply Quote 0
        • K
          kevindd992002
          last edited by

          If I use a USB2.0 cable to the internal header of the APU2C4, how do I route it so that I can access it externally from the official black case provided by PCEngines?

          dotdashD 1 Reply Last reply Reply Quote 0
          • dotdashD
            dotdash @kevindd992002
            last edited by

            @kevindd992002 said in PC Engines apu2 experiences:

            If I use a USB2.0 cable to the internal header of the APU2C4, how do I route it so that I can access it externally from the official black case provided by PCEngines?

            When I loaded from the USB header, I had the top of the case off. I think you'd have to modify the case if you wanted to put the top back on.

            K 1 Reply Last reply Reply Quote 0
            • K
              kevindd992002 @dotdash
              last edited by

              @dotdash said in PC Engines apu2 experiences:

              @kevindd992002 said in PC Engines apu2 experiences:

              If I use a USB2.0 cable to the internal header of the APU2C4, how do I route it so that I can access it externally from the official black case provided by PCEngines?

              When I loaded from the USB header, I had the top of the case off. I think you'd have to modify the case if you wanted to put the top back on.

              Yeah, drill through it or something. I would love to just use the USB2.0 header with external USB ports than wait for the devs to fix that long-standing USB3 issue.

              1 Reply Last reply Reply Quote 0
              • K
                kevindd992002 @Veldkornet
                last edited by kevindd992002

                @veldkornet said in PC Engines apu2 experiences:

                @kinch said in PC Engines apu2 experiences:

                @DaddyGo

                I've examined it and found the following:

                iperf3 LAB
                No matter if APU2/3/4 I get a throughput with single connection of 750-850Mbit/s (LAN 2 OPT)

                With 2 or more connections I get about 945Mbit/s.

                A Speedtest.net gives the value 934Mbit/s UP/DOWN

                I have tested the following BIOS versions:
                V4.9.0.2
                V4.11.0.2
                V4.12.0.1

                All the same.

                But what I noticed, tested on APU2 and APU3, that pfsense version 2.4.5 does not reach the same throughput as 2.4.4-p3.
                With Single Connection pfsense 2.4.5 reaches "only" about 400-500Mbit/s. With pfsense 2.4.5 I can only reach 940Mbps with 8 connections.

                I also noted something weird with 2.4.5.

                My iPerf speeds were also much lower than normal. What I did to fix it was:

                • disabling hardware offload (check the check boxes)
                • save, no reboot (iPerf results the same)
                • re-enabling hardware offload (clear the check boxes)
                • save, no reboot (iPerf results back up to the expected levels)

                The only thing I did between having good iPerf results and slow ones was reboot the device. It's as if after a reboot, it forgot that hardware offload was enabled, and I just needed to set it again.

                @dugeem

                Do you have any comments on this? As we discussed before, here are the tweaks I have:

                b8eba554-297e-41bb-b2bf-e741464c198a-image.png

                bc292172-d169-4596-8a74-122d4909c5a6-image.png

                /boot/loader.conf.local contains:

                hw.igb.rx_process_limit=-1

                Also, it looks like the guys here updated their article but they are still insisting to enable all three HW offloads as they see that it gives better speeds.

                And what is the recommended setting for hardware checksum offload? Checked (disabled) or unchecked (enabled)?

                I'm asking again because my ISP connection is at 400/400 now and I'm thinking of upgrading to 800/800 soon. I want to know if my APU2C4 can handle these speeds with the tweaks that we have.

                @Veldkornet

                Which of the HW offloads did you enable (unchecked) to get significantly better multi-connection speeds?

                @VAMike

                What is your comment on the HW offload settings? I see that you had a comment against the post of Veldkornet where he enabled those settings to get better speeds. If he saw better speeds with those enabled, is that an inaccurate test or something because it only helps the client and not end-to-end? Sorry if I misunderstood.

                QinnQ DaddyGoD 2 Replies Last reply Reply Quote 0
                • QinnQ
                  Qinn @kevindd992002
                  last edited by

                  @kevindd992002 Why only the receive (rx) and not the transmit (tx) in the loader.conf.local file and why did you not uncheck?

                  Hardware TCP Segmentation Offloading
                  Hardware Large Receive Offloading

                  Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                  Firmware: Latest-stable-pfSense CE (amd64)
                  Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                  K 1 Reply Last reply Reply Quote 0
                  • K
                    kevindd992002 @Qinn
                    last edited by

                    @qinn said in PC Engines apu2 experiences:

                    @kevindd992002 Why only the receive (rx) and not the transmit (tx) in the loader.conf.local file and why did you not uncheck?

                    Hardware TCP Segmentation Offloading
                    Hardware Large Receive Offloading

                    Answers to your questions:

                    https://forum.netgate.com/post/908003

                    QinnQ 1 Reply Last reply Reply Quote 0
                    • QinnQ
                      Qinn @kevindd992002
                      last edited by

                      @kevindd992002 You are refring to my own reply, but these settings are from a older date and referred to pre pfSense version 2.4.5-p1

                      You should now have these and then reboot

                      pfSense-2.4.5-p1.png

                      https://forum.netgate.com/topic/95148/pc-engines-apu2-experiences/384

                      Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                      Firmware: Latest-stable-pfSense CE (amd64)
                      Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                      K 1 Reply Last reply Reply Quote 0
                      • K
                        kevindd992002 @Qinn
                        last edited by

                        @qinn said in PC Engines apu2 experiences:

                        @kevindd992002 You are refring to my own reply, but these settings are from a older date and referred to pre pfSense version 2.4.5-p1

                        You should now have these and then reboot

                        pfSense-2.4.5-p1.png

                        https://forum.netgate.com/topic/95148/pc-engines-apu2-experiences/384

                        I'm still confused. I wasn't referring to your reply. I was referring to @dugeem 's reply when we discussed this.

                        Again, read https://forum.netgate.com/post/908003

                        Let me quote some parts of his reply:

                        "Firstly TSO & LRO should always be disabled on routers. Netgate recommend this (hence pfSense defaults) as do others. BSDRP have even tested this and found routing performance drop negligible from enabling TSO & LRO (see link below)."

                        "hw.igb.tx_process_limit already defaults to -1 so no need to change this."

                        So those are the answers to your questions. Also, like I mentioned in my reply today:

                        "Also, it looks like the guys here updated their article but they are still insisting to enable all three HW offloads as they see that it gives better speeds."

                        So, to summarize, dugeem explained very well that TSO and LRO needs to be disabled (so checked) and that the teklager article is wrong. With their updated article, they are still insisting to keep those three offloads enabled.

                        Everything clear now?

                        1 Reply Last reply Reply Quote 0
                        • DaddyGoD
                          DaddyGo @kevindd992002
                          last edited by

                          @kevindd992002 said in PC Engines apu2 experiences:

                          Also, it looks like the guys here updated their article but they are still insisting to enable all three HW offloads as they see that it gives better speeds.

                          Hi,

                          Because of the behavior of the TSO and LRO, it is important ...
                          This is an endpoint question and not a routing and / or a router NIC setup ...

                          this will definitely help you understand the behavior (FreeBSD):

                          https://calomel.org/freebsd_network_tuning.html
                          https://calomel.org/network_performance.html
                          https://blog.cloudflare.com/how-to-receive-a-million-packets/

                          TSO and LRO are not good, if you are a router, but if you are an endpoint you can use them...

                          remember you're talking about an APU (pcEngines) stuff and an i211 thing, you'll do more if you could increase your PCie bus speed and / or RAM

                          With such a MOBO, the opportunity is not given... ๐Ÿ˜‰
                          (dmesg | grep -i msi)

                          which can help a lot, disabling EEE and FC on igb0-3

                          Something like:

                          bd259da3-26b0-4036-ac8e-4219c6515d8d-image.png

                          Cats bury it so they can't see it!
                          (You know what I mean if you have a cat)

                          K 1 Reply Last reply Reply Quote 0
                          • K
                            kevindd992002 @DaddyGo
                            last edited by

                            @daddygo said in PC Engines apu2 experiences:

                            @kevindd992002 said in PC Engines apu2 experiences:

                            Also, it looks like the guys here updated their article but they are still insisting to enable all three HW offloads as they see that it gives better speeds.

                            Hi,

                            Because of the behavior of the TSO and LRO, it is important ...
                            This is an endpoint question and not a routing and / or a router NIC setup ...

                            this will definitely help you understand the behavior (FreeBSD):

                            https://calomel.org/freebsd_network_tuning.html
                            https://calomel.org/network_performance.html
                            https://blog.cloudflare.com/how-to-receive-a-million-packets/

                            TSO and LRO are not good, if you are a router, but if you are an endpoint you can use them...

                            remember you're talking about an APU (pcEngines) stuff and an i211 thing, you'll do more if you could increase your PCie bus speed and / or RAM

                            With such a MOBO, the opportunity is not given... ๐Ÿ˜‰
                            (dmesg | grep -i msi)

                            which can help a lot, disabling EEE and FC on igb0-3

                            Something like:

                            bd259da3-26b0-4036-ac8e-4219c6515d8d-image.png

                            So are you recommending that TSO and LRO be enabled in this use case?

                            Also, I would really want to know what all those system tunables do before I implement them blindly to my system.

                            @dugeem any comment on this since you were the one who explained the routing concept for these parameters in the first place?

                            DaddyGoD 1 Reply Last reply Reply Quote 0
                            • DaddyGoD
                              DaddyGo @kevindd992002
                              last edited by DaddyGo

                              @kevindd992002 said in PC Engines apu2 experiences:

                              So are you recommending that TSO and LRO be enabled in this use case?

                              So we have been using APU4d4 stuff at the endpoints of our users and colleagues for years, so I can tell you first hand that their performance is finite....

                              The answer to your question is to never enable TSO and LRO on a router

                              +++edit:
                              this is an old thread, read my posts above ๐Ÿ˜‰

                              BTW:
                              why do you think the TSO and LRO are disabled after a clean pfSense install (by Netgate)

                              Cats bury it so they can't see it!
                              (You know what I mean if you have a cat)

                              K 2 Replies Last reply Reply Quote 0
                              • K
                                kevindd992002 @DaddyGo
                                last edited by

                                @daddygo said in PC Engines apu2 experiences:

                                @kevindd992002 said in PC Engines apu2 experiences:

                                So are you recommending that TSO and LRO be enabled in this use case?

                                So we have been using APU4d4 stuff at the endpoints of our users and colleagues for years, so I can tell you first hand that their performance is finite....

                                The answer to your question is to never enable TSO and LRO on a router

                                Yes, I'm aware that you are well-experienced with this boards. And I believe you. I'm just making sure that I'm running these APU2C4's to their max potential. And as you can see in my post yesterday, I have TSO and LRO disabled since early this year.

                                Also, I transitioned from using OpenVPN to IKEv2 IPsec and I can't believe my own eyes how fast IPsec is. I had to switch because I upgraded the Internet subscription of my remote site to 100/100. In any case, do you have any ideas on my question here?

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kevindd992002 @DaddyGo
                                  last edited by

                                  @daddygo said in PC Engines apu2 experiences:

                                  @kevindd992002 said in PC Engines apu2 experiences:

                                  So are you recommending that TSO and LRO be enabled in this use case?

                                  So we have been using APU4d4 stuff at the endpoints of our users and colleagues for years, so I can tell you first hand that their performance is finite....

                                  The answer to your question is to never enable TSO and LRO on a router

                                  +++edit:
                                  this is an old thread, read my posts above ๐Ÿ˜‰

                                  BTW:
                                  why do you think the TSO and LRO are disabled after a clean pfSense install (by Netgate)

                                  Where did I say that TSO and LRO are disabled after a clean install of pfSense? I never said that.

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kevindd992002
                                    last edited by

                                    Is it recommended to downgrade from 14.13.0.1 to 14.11.0.6 for the APU2C4 since it says on pcengines' website that the recommended firmware is the "latest 4.11.x.x"? Can you downgrade without any issues?

                                    fireodoF 1 Reply Last reply Reply Quote 0
                                    • fireodoF
                                      fireodo @kevindd992002
                                      last edited by

                                      @kevindd992002 said in PC Engines apu2 experiences:

                                      Can you downgrade without any issues?

                                      Yes, but you have to respect the correct flashing procedure.
                                      Current BIOS is v4.13.0.2 so why downgrade?

                                      Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                      SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                      pfsense 2.8.0 CE
                                      Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kevindd992002
                                        last edited by

                                        @fireodo where can I see the proper flashing procedure/order? And like I said, the only reason I'm considering downgrading is because 4.11.x.x is the recommended firmware as mentioned in their website.

                                        fireodoF 1 Reply Last reply Reply Quote 0
                                        • fireodoF
                                          fireodo @kevindd992002
                                          last edited by fireodo

                                          @kevindd992002 said in PC Engines apu2 experiences:

                                          @fireodo where can I see the proper flashing procedure/order?

                                          Here:
                                          Apu-Flashing

                                          And like I said, the only reason I'm considering downgrading is because 4.11.x.x is the recommended firmware as mentioned in their website.

                                          OK, understood.

                                          Regards,
                                          fireodo

                                          Kettop Mi4300YL CPU: i5-4300Y @ 1.60GHz RAM: 8GB Ethernet Ports: 4
                                          SSD: SanDisk pSSD-S2 16GB (ZFS) WiFi: WLE200NX
                                          pfsense 2.8.0 CE
                                          Packages: Apcupsd, Cron, Iftop, Iperf, LCDproc, Nmap, pfBlockerNG, RRD_Summary, Shellcmd, Snort, Speedtest, System_Patches.

                                          K 1 Reply Last reply Reply Quote 0
                                          • K
                                            kevindd992002 @fireodo
                                            last edited by

                                            @fireodo said in PC Engines apu2 experiences:

                                            @kevindd992002 said in PC Engines apu2 experiences:

                                            @fireodo where can I see the proper flashing procedure/order?

                                            Here:
                                            Apu-Flashing

                                            And like I said, the only reason I'm considering downgrading is because 4.11.x.x is the recommended firmware as mentioned in their website.

                                            OK, understood.

                                            Regards,
                                            fireodo

                                            Ahh, I thought you were pertaining to an "order" of flashing when downgrading. So it's just the usual flashing procedure then? I'm using flashrom inside of pfsense. So I can directly go from 14.13.0.1 to 14.11.0.6?

                                            fireodoF 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.