I5 5250U 4 LAN Home computer Q355G4 install question

Waqar.UK

I used this as a guide to install https://doc.pfsense.org/index.php/Installing_pfSense

To write images: https://doc.pfsense.org/index.php/Writing_Disk_Images - Image Writer for Windows / Win32 Disk Imager is much easier to SSD.
I just plugged in my wan when setup asked to plug in my wan cable and same for lan.

occamsrazor

Thanks, that guide is useful although I plan to install 2.4 straight away. From what I read 2.4 uses a different install type:

https://doc.pfsense.org/index.php/2.4_New_Features_and_Changes#Operating_System_.2F_Architecture_changes

I'm just planning ahead to see what will be the best combination of media on which to install on in terms of SSD (and if size?) or USB keys (if so 1 or 2 keys and what size?). I'll ask a question on the 2.4.0 ZFS How To thread.

Waqar.UK

@occamsrazor:

Thanks, that guide is useful although I plan to install 2.4 straight away. From what I read 2.4 uses a different install type:

https://doc.pfsense.org/index.php/2.4_New_Features_and_Changes#Operating_System_.2F_Architecture_changes

I'm just planning ahead to see what will be the best combination of media on which to install on in terms of SSD (and if size?) or USB keys (if so 1 or 2 keys and what size?). I'll ask a question on the 2.4.0 ZFS How To thread.

Use a SSD, I had a spare 120GB Kingston hyperx that I was planning to use for a different project.
To install, any drive, I used a 4GB sandisk usb 2.0 that I bought many years ago.

occamsrazor

@PingTheNet:

Mine were out of order too and I had to swich them using Option 2 on th PfSence unit. Used the MAC to figure out the order. Mine was ordered 1, 4, 2, 3.

Mine were also out of order. igb0 is 1 and igb1 is 4.

What is this "Option 2" method you speak of for changing them?

phochiom

@occamsrazor:

@PingTheNet:

Mine were out of order too and I had to swich them using Option 2 on th PfSence unit. Used the MAC to figure out the order. Mine was ordered 1, 4, 2, 3.

Mine were also out of order. igb0 is 1 and igb1 is 4.

What is this "Option 2" method you speak of for changing them?

Same here for NICs, exactly same order.

ChefRayB

Ordered: QOTOM Q355G4 I5 5250U 8GB RAM 120GB SSD
Delivery: 15-28 days

I will report after I receive it and install pfSense on the box. I plan to install OpenVPN client and compare the bandwidth against my laptop.

reference:

https://www.aliexpress.com/store/product/QOTOM-Q355G4-2017-New-fanless-X86-4-LAN-Micro-Computer-I5-5250U-Dual-core-onboard-1080P/108231_32800711474.html

ChefRayB

Update: Received hardware Q355G4, exactly as described by other users

Please keep in mind to install AMD64 pfsense packages.

If you install i386 package, the package installation will work but you will encounter CAS Latency timeouts when formatting SSD and reboot loops.

ChefRayB

I am back, as promised, I am sharing my results & experience with qotom G355Q4 !

Long story short, box is great, fanless and perhaps a bit too powerful for home usage! 8)

Hardware: qotom Q355G4 with SSD
BIOS: hyper-threading disabled/
pfsense advanced: powerd enabled, AES-NI Enabled, Thermal = Intel Core
pfsense system tunable: sysctl dev.cpu.[0|1].cx_lowest=C3
Client: Gigabit connectivity
Packages: avahi installed
ISP Speed: 100 Mbs
VPN Provider: StrongVPN (AES 256 bit, MDS 128bit Auth, Adaptive compression)
Room Temperature: 24 Celsius

idle power consumption
powerd enabled, minimum, 10-11 watts, 52-53 Celsius, casing 44 Celsius
powerd enabled, adaptive, 10-11 watts, 52-53 Celsius, casing 44 Celsius
powerd enabled, maximum, 11-12 watts,54-57 Celsius, casing 45 Celsius
powerd disabled, 11-12 watts, 55-57 Celsius, casing 45 Celsius

Conclusion: When idle the box seems to always need 10-12 watts regardless of the power mode. Is there better hardware out there that requires less wattage, support AES-NI, descent clock speed (Since OpenVPN is Single Core) and can provide 100Mbs output ? If you find one, share it with everyone in the forum !

Bandwidth test with ISP (no encryption) using Bandwidth Website
110 Mbs with powerd minimum, cpu <10%, 10-11 watts
110 Mbs with powerd adaptive, cpu <10 %, 11 watts,
110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

Conclusion: My ISP seems to provide me with 100 Mbs download speed

Bandwidth test using ISP downloading 5-6 HUGE FILES simultaneously for a good period of time :)
110 Mbs with powerd minimum, cpu 20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
110 Mbs with powerd adaptive, cpu 20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
110 Mbs with powerd maximum, cpu 20%, 14 watts (weird), CPU 52 Celsius, Router casing 44 Celsius
110 Mbs with powerd disabled, cpu 20%, 11 watts, CPU 52 Celsius, Router casing 44 Celsius

Conclusion: I can download 5-6 Huge files @ 110 Mbs regardless of the power saving mode because there is no encryption.

Bandwidth test using Internet through OpenVPN (encryption) using Bandwidth Website (tested a few times)
60 Mbs with powerd minimum, cpu <10 %, 10-11 watts,
110 Mbs with powerd adaptive, cpu <10 %, 11 watts,
110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

Conclusion: powerd minimum doesn't seem to work well with OpenVPN….

Bandwidth test using Internet through OpenVPN (encryption) downloading 5-6 HUGE FILES simultaneously for a good period of time :)
50 Mbs with powerd minimum, cpu 25 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
100 Mbs with powerd adaptive, cpu 35 %, 11-12 watts, CPU 54 Celsius, Router casing 45 Celsius
100 Mbs with powerd maximum, cpu 12%, 15 watts, CPU 63 Celsius, Router casing 46 Celsius
100 Mbs with powerd disabled, cpu 15%, 15.4 watts, CPU 64 Celsius, Router casing 47 Celsius

Overall Conclusion:Bandwidth is slightly affected by encryption (assuming good hardware & vpn provider). If you want to save energy & generate a bit less heat, you can perhaps consider using powerd adaptive mode. Perhaps the next generation of energy efficient Celeron might be a better choice for home if you don't plan to use pfsense packages that are CPU intensive.

Geek Test (powerd -a min -m 600 -M 600 forced it via Shell command)
60 Mbs with powerd enable, min freq 600, max freq 600, cpu 30-40%, 11-12 watts, CPU 52 Celsius, Router casing 44 Celsius

tfast500

Thanks for that info.

seriously considering purchasing one of these Qotom Q355G4 units.

350 seems like a lot of money for a home router/firewall

Sounds like performance is about as good as you get for a low powered device tho.

I am wondering if this would work for me?

I run 60/5 but will be using multiple encrypted vpns, and many vlans. Fiber is currently being put in and expect to be on 100/100 in the next year or two…(cant wait)

I have about 30+ devices on my network (vms, tablets, laptops, desktops, phones, servers, tv boxes, and surveillance.) (all part of my homelab)

Will this little booger keep up? I also would like to mess with snort, squid and other packages.

Intrested in bridging the interfaces. 2 or 3 to ports to feed my 10gbe switch

ChefRayB

Perhaps try to run pfsense on a virtual box to get a good feel and decide if pfsense is a good for you.
100 Mbs seems to be achievable and sustainable for OpenVPN.
10 Gbe switch, why do you need 10 Gbe internally ? (you can msg me !)

tfast500

I have 4 sfp+10gbe ports available from my two stacked switches. They connect to my proxmox server, freenas server, and two workstations in my office. I really dont need that kind of speed but it sure makes transfers super fast. I wanted to play around with enterprise level technology and it was cheap enough to do as part of my home lab.

I should have also stated that I currently run pfsense on a dell optiflex 780 sff but this thing throws out heat it has a Quad core Q8400. I have not had any issues with it other then power consumption and heat…

I am wanting to see if a small <15watt device would fulfill my needs.

ChefRayB

In the <15 TDP, the qotom Q355G4 is a good contender :)

Retrospectively, I would have preferred <10 TDP but I wasn't able to find one that had AES-NI, enough power for additional packages, 4x Intel NICS and fan-less chassis.

Life is too short :)

rclar

I have one of these that I just set up, and I am getting miserable performance on the wan connection. I just pulled out my fios router which I was consistently getting 25/25 with, and now I am typically getting 2~4 down and 25 up.

Does anyone have suggestions on what I should look towards to try to diagnose?

xMutex

@ChefRayB:

I am back, as promised, I am sharing my results & experience with qotom G355Q4 !

Long story short, box is great, fanless and perhaps a bit too powerful for home usage! 8)

Hardware: qotom Q355G4 with SSD
BIOS: hyper-threading disabled/
pfsense advanced: powerd enabled, AES-NI Enabled, Thermal = Intel Core
pfsense system tunable: sysctl dev.cpu.[0|1].cx_lowest=C3
Client: Gigabit connectivity
Packages: avahi installed
ISP Speed: 100 Mbs
VPN Provider: StrongVPN (AES 256 bit, MDS 128bit Auth, Adaptive compression)
Room Temperature: 24 Celsius

idle power consumption
powerd enabled, minimum, 10-11 watts, 52-53 Celsius, casing 44 Celsius
powerd enabled, adaptive, 10-11 watts, 52-53 Celsius, casing 44 Celsius
powerd enabled, maximum, 11-12 watts,54-57 Celsius, casing 45 Celsius
powerd disabled, 11-12 watts, 55-57 Celsius, casing 45 Celsius

Conclusion: When idle the box seems to always need 10-12 watts regardless of the power mode. Is there better hardware out there that requires less wattage, support AES-NI, descent clock speed (Since OpenVPN is Single Core) and can provide 100Mbs output ? If you find one, share it with everyone in the forum !

Bandwidth test with ISP (no encryption) using Bandwidth Website
110 Mbs with powerd minimum, cpu <10%, 10-11 watts
110 Mbs with powerd adaptive, cpu <10 %, 11 watts,
110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

Conclusion: My ISP seems to provide me with 100 Mbs download speed

Bandwidth test using ISP downloading 5-6 HUGE FILES simultaneously for a good period of time :)
110 Mbs with powerd minimum, cpu 20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
110 Mbs with powerd adaptive, cpu 20 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
110 Mbs with powerd maximum, cpu 20%, 14 watts (weird), CPU 52 Celsius, Router casing 44 Celsius
110 Mbs with powerd disabled, cpu 20%, 11 watts, CPU 52 Celsius, Router casing 44 Celsius

Conclusion: I can download 5-6 Huge files @ 110 Mbs regardless of the power saving mode because there is no encryption.

Bandwidth test using Internet through OpenVPN (encryption) using Bandwidth Website (tested a few times)
60 Mbs with powerd minimum, cpu <10 %, 10-11 watts,
110 Mbs with powerd adaptive, cpu <10 %, 11 watts,
110 Mbs with powerd maximum, cpu <10%, 11-15 watts peak
110 Mbs with powerd disabled, cpu <10%, 11-16 watts peak

Conclusion: powerd minimum doesn't seem to work well with OpenVPN….

Bandwidth test using Internet through OpenVPN (encryption) downloading 5-6 HUGE FILES simultaneously for a good period of time :)
50 Mbs with powerd minimum, cpu 25 %, 11 watts, CPU 52 Celsius, Router casing 44 Celsius
100 Mbs with powerd adaptive, cpu 35 %, 11-12 watts, CPU 54 Celsius, Router casing 45 Celsius
100 Mbs with powerd maximum, cpu 12%, 15 watts, CPU 63 Celsius, Router casing 46 Celsius
100 Mbs with powerd disabled, cpu 15%, 15.4 watts, CPU 64 Celsius, Router casing 47 Celsius

Overall Conclusion:Bandwidth is slightly affected by encryption (assuming good hardware & vpn provider). If you want to save energy & generate a bit less heat, you can perhaps consider using powerd adaptive mode. Perhaps the next generation of energy efficient Celeron might be a better choice for home if you don't plan to use pfsense packages that are CPU intensive.

Geek Test (powerd -a min -m 600 -M 600 forced it via Shell command)
60 Mbs with powerd enable, min freq 600, max freq 600, cpu 30-40%, 11-12 watts, CPU 52 Celsius, Router casing 44 Celsius

Hey ChefRayB!

Did you do any benchmark to see what kind of VPN speeds that HW maxes out at? I wish to get one that is future-proof (pref can handle 500/100) with vpn, what do you think?

ivor

There's already a qotom topic, please ask questions there. Thanks.