Shuttle DS77
-
While I was looking for a upgrade for my Zotac C323 I stumbled over the Shuttle DS77. It comes with different CPU Flavors (up to a Kaby Lake I7) and is always passively cooled, which is a must since my appliance is within hearing range :)
The Specs read nicely especially since it has two Intel NICs: http://www.shuttle.eu/products/slim/ds77u/specification/
Anyone have any experience with this box?
-
I have also been looking at getting a Shuttle DS77U for home firewall. (openvpn server and client use).
Have you pulled the trigger and gotten one yet or has anyone else had any experience with one?
On paper it looks like it should be perfect for pfsense.
-
I've been running the predecessors DS57U since 2015 and DS67U since last summer. Working great so far! I expect the DS77U to perform even better :)
My DS77U is assembled but currently gathering dust since it is configured with a nvme drive which requires pfSense 2.4 to boot. I was just about to start experimenting with the snapshots on it until I found a thread describing regressions relating to ACPI: https://forum.pfsense.org/index.php?topic=134755.0
-
Good info about nvme and acpi, had no idea about those issues. You think disabling acpi until 2.4.1 solve the issue for now?
I would be grateful if you could test what sort of openvpn speeds you can get out of the DS77U, I am assuming you have the one with a 3865U chip?
Trying to work out if the jump to the 7100U one is worth it, I'm guessing it would be overkill for gigabit wan/lan routing and 100-200mbps openvpn. -
Hi,
Have the DS77U running with pfSense 2.4.0. Inside I have 8 gb Ram and a M.2 SSD card.
It works very well! I had to set M.2 card from SATA to PCI to get it to work in the bios.
Installation of pfSENSE via Memstick went well, beware that you might need a monitor with HDMI/Displayport (it lacks VGA)
The OPENVPN-connections are hardware crypto accelerated which give good speed results, approximately 90% of the normal ISP speed…
Temp is 30C with a CPU usage of around 5% -
Good info about nvme and acpi, had no idea about those issues. You think disabling acpi until 2.4.1 solve the issue for now?
I would be grateful if you could test what sort of openvpn speeds you can get out of the DS77U, I am assuming you have the one with a 3865U chip?
Trying to work out if the jump to the 7100U one is worth it, I'm guessing it would be overkill for gigabit wan/lan routing and 100-200mbps openvpn.A little late but I finally got it up and running!
Here's some speedtests for you (DS77U, 3865U, 2.4.1-RELEASE):
CBC: openssl speed aes-128-cbc aes-128 cbc 68210.57k 75605.80k 77612.25k 78107.54k 78404.52k openssl speed aes-128-cbc -multi 2 aes-128 cbc 131153.49k 147503.04k 148847.36k 152038.06k 153004.71k openssl speed aes-256-cbc aes-256 cbc 50314.94k 54149.78k 55158.53k 55540.82k 55658.96k openssl speed aes-256-cbc -multi 2 aes-256 cbc 98275.47k 107082.79k 109251.16k 104750.76k 103885.48k openssl speed aes-256-cbc -multi 4 aes-256 cbc 96934.95k 105304.92k 111095.98k 111068.73k 109262.33k CBC with Envelope: openssl speed -evp aes-128-cbc aes-128-cbc 566274.07k 618790.02k 640560.46k 643536.55k 643189.42k openssl speed -evp aes-128-cbc -multi 2 evp 1116641.03k 1155902.83k 1267443.54k 1246645.84k 1268792.15k openssl speed -evp aes-256-cbc aes-256-cbc 427213.53k 453748.46k 459032.66k 463006.52k 463769.80k openssl speed -evp aes-256-cbc -multi 2 evp 839137.26k 853202.47k 885389.57k 898354.45k 868291.93k GCM: openssl speed -evp aes-128-gcm aes-128-gcm 316490.79k 839964.26k 1388169.48k 1529748.39k 1576960.26k openssl speed -evp aes-128-gcm -multi 2 evp 615091.66k 1648089.73k 2626153.47k 2969000.96k 3113052.84k openssl speed -evp aes-256-gcm aes-256-gcm 281719.70k 755495.23k 1160111.84k 1249082.88k 1280701.78k openssl speed -evp aes-256-gcm -multi 2 evp 543052.01k 1460568.30k 2255877.57k 2429187.96k 2527988.39k openssl speed -evp aes-256-gcm -multi 4 evp 547781.74k 1485326.95k 2348930.48k 2511385.61k 2543827.45k -
I have also used a DS77U and it does indeed work great. While there still are incompatibilities as mentioned, when you get it to work you're pretty much set for the next 10 years (unless you get heavy speed or load increase).
The only thing preventing me from getting more of them in the field was the fact that cheap china boxes are almost as reliable and half the price.
Before the DS77U I also used the slightly bigger socketed versions, those are the barebones with 2 extra bays in them. It was very useful for caching (used for local update and package distribution) in a mobile setup since it's still very small.
I do hope the embedded mobile versions of the Intel CPU + PCH combo's get a coreboot port, that would be very nice to have.
-
I am trying to setup pfSense on DS77U and so far setup has gone without an hitch. However, I am having trouble setting it up as an headless unit. It works fine as long as a monitor is attached during startup (first 10-20 seconds), but if no monitor is attached than network doesn't come up. I have tried using display emulators but without any luck.
Has anyone succeeded in setting it up as a headless unit? I installed pfSense using memstick installer with VGA Console.
-
I am trying to setup pfSense on DS77U and so far setup has gone without an hitch. However, I am having trouble setting it up as an headless unit. It works fine as long as a monitor is attached during startup (first 10-20 seconds), but if no monitor is attached than network doesn't come up. I have tried using display emulators but without any luck.
Has anyone succeeded in setting it up as a headless unit? I installed pfSense using memstick installer with VGA Console.
I use serial
-
It looks like that pfSense 2.4.0 (or greater) doesn't like DS77U if serial ports are enabled on the device. It started working as soon as I disabled the Serial Ports.
I think the other way around is to use Serial Console like previous user said.
-
../..
However, I am having trouble setting it up as an headless unit. It works fine as long as a monitor is attached during startup (first 10-20 seconds), but if no monitor is attached than network doesn't come up. I have tried using display emulators but without any luck.
../..I am experiencing something similar here on my DS67U. I doesn't seem to post (after initial power-on) if there is no display connected to the HDMI/DP ports. Any time I reboot (or restore power) on the system, it never gets past the post screen. If I connect a monitor after power on (usually to troubleshoot and see why pfSense hasn't started, sigh), the monitor will immediately go into standby - meaning there is no signal on the monitor output. It's very frustrating, because it means it's impossible to use the computer as in a headless config.
-
../..
However, I am having trouble setting it up as an headless unit. It works fine as long as a monitor is attached during startup (first 10-20 seconds), but if no monitor is attached than network doesn't come up. I have tried using display emulators but without any luck.
../..I am experiencing something similar here on my DS67U. I doesn't seem to post (after initial power-on) if there is no display connected to the HDMI/DP ports. Any time I reboot (or restore power) on the system, it never gets past the post screen. If I connect a monitor after power on (usually to troubleshoot and see why pfSense hasn't started, sigh), the monitor will immediately go into standby - meaning there is no signal on the monitor output. It's very frustrating, because it means it's impossible to use the computer as in a headless config.
I currently use DS57U, DS67U and DS77U without issues. What is your boot media? Which BIOS and pfSense version? VGA/Serial Console?