New Build - Fiber -

[Majornizmo]

Long Time lurker, first post.

Finally built my server up.

E5-2699v4 x2
Gigabyte MD70 board
64Gb ECC Micron 2400Mhz
10Gb Dual SFP+ Intel PCIe
1.6Tb Intel DC P3608 NVMe
Gigabyte GTX 1080

I am giving 8 cores, and 8gb ram to the PF VM on a 120Gb SSD, running Win 2016 Datacenter as the hypervisor.

I have a bunch of Quanta LB4M switches, they have 2 SFP+ uplinks so originally I was using them for the WAN/LAN PF connections. Recently, I've played on a test server, where I gave jumbo-packets to the server using bonded SFP+, giving PF to an Intel Gigabit controller, because I can only use 2 SFP+ at a time with this switch. I use each Quanta for a physical network from my ISP which gives me many IP's. A single 48 port off the ONT gives me 48 IP's to 48 racks hypothetically.

Would it be worth looking into SFP+ for the WAN and LAN side as well? I mainly beefcake'd the router in case of DDos or other intrusion attempt. As long as I can overpower the attack to never saturate, I win right?

I'm running about 60 servers on each hypervisior, hoping 2.3.2 version scales the CPU's properly. So far its running well(i think), using Snort as well. If for nothing else, let this post be a lesson that 10Gb is possible, and working well. I have not tested enough for throughput but I get 500Mb/s up and down from the ISP,Speedtest.net and to each of the VM's.

[whosmatt]

@Majornizmo:

I have not tested enough for throughput but I get 500 up and down from the ISP and speedtest and to each of the VM's.

500 what?

[Majornizmo]

Mb/s

[P3R]

Wow 500 millibits/second, that sounds slow!  ;)

Or could it be Megabits/sec? But if it is, it could be MegaBytes/sec as well. Or even milliBytes/sec… ::)

This is so complicated!!! :'(

[VAMike]

@P3R:

Wow 500 millibits/second, that sounds slow!  ;)

Or could it be Megabits/sec? But if it is, it could be MegaBytes/sec as well. Or even milliBytes/sec… ::)

This is so complicated!!! :'(

this is actually important, not just snark. 500Mbit/s would be kinda meh. 500MByte/s would be pretty decent.

[whosmatt]

@VAMike:

this is actually important, not just snark. 500Mbit/s would be kinda meh. 500MByte/s would be pretty decent.

Yeah, that was my point in asking.  I'd have been shocked to see that kind of throughput from any pfSense box running on a hypervisor.