AXIOMTEK? Hardware for OpenVPN throughput with AES-NI on pfsense 2.4 and 2.5+
-
Guys i think i found good solution for openvpn throughput. Check it out and let me know if anyone tested any of those CPU. I'm targeting 300Mbps or more on openvpn. For $300 i would like to future proof it a bit as i got burned with Zotac box N3510 that can't do more then 120Mbps on openvpn. I am also attaching original 2 yr old throughput thread for reference. https://forum.pfsense.org/index.php?topic=115673.0
The once that look interesting are CAPA500 & CAPA312 with N3350 with CAPA500 obviously slaying it. I can't find the pricing for it tho. Let me know if anyone tested some of those processors throughput.
I have attached few other sources that seem interesting. If anyone has any other hardware suggestions please post some links. Thank you.http://www.axiomtek.com/Default.aspx?MenuId=Products&FunctionId=ProductInfo&Cat=270&C=3.5-inch%20Embedded%20Board&Page=1
http://www.axiomtek.com/Default.aspx?MenuId=Products&FunctionId=ProductCompare&Cat=270&Id=CAPA500,%20CAPA318&C=3.5-inch%20Embedded%20Board
http://www.lannerinc.com/products/network-appliances/x86-desktop-network-appliances/nca-1510
https://www.aliexpress.com/item/QOTOM-4-LAN-Mini-PC-with-Core-i3-4005U-i5-5250U-processor-and-4-Gigabit-NIC/32812678037.html?spm=2114.search0104.3.8.11c66ddepBwzDs&ws_ab_test=searchweb0_0,searchweb201602_3_10152_10151_10065_10344_10130_10068_10324_10547_10342_10325_10546_10343_10340_10548_10341_10545_10084_10083_10618_10307_10313_10059_10534_100031_10103_10627_10626_10624_10623_10622_10621_10620,searchweb201603_25,ppcSwitch_2&algo_expid=d2d0b89b-f7eb-4358-bcf8-506b622a23ff-1&algo_pvid=d2d0b89b-f7eb-4358-bcf8-506b622a23ff&priceBeautifyAB=0
-
Thanks bud for the feedback. Question. How does one establish multiple connections on vpn. I believe vpn provider will only allow one connection per username so i'm fuzzy how this could be setup. I'm sure they wouldn't like that at all. Sorry i'm still a newbie to this.
BTW yes i agree. I have decided upon i5 as celeron sucks and so does atom looking at single thread rating on cpubenchmark website. i7 has very incremental gain over i5 but cost is $100 more for it so it's not worth it.
i3 performance is too diminished and closer to celeron so i did pass on that one as well. What i did i looked up single thread performance of all those processors on cpubenchmark as openvpn is single thread operation i chose best one for the money which turned out to be i5. I passed on AMD as well as i saw few threads with issues of AMD and AES-NI instructions. Don't wanna deal with that although i have AMD APU in my pc and i love it. Never had issue with it but for firewall i would stick with intel. My thoughts on intel was and still is a very overpriced CPU. AMD kicks ass for the money.
There is interesting CPU for for firewall i5-6200U with same performance as i7-4500U but no one makes this yet with dual nics.
https://www.cpubenchmark.net/cpu.php?cpu=Intel+Core+i5-6200U+%40+2.30GHz&id=2556
https://www.cpubenchmark.net/cpu.php?cpu=Intel+Core+i5-7200U+%40+2.50GHz&id=2865
vs
https://www.cpubenchmark.net/cpu.php?cpu=Intel+Core+i7-4500U+%40+1.80GHz&id=1937However i found i5 that is slightly worst then that one but only slightly. I wish there was a way to make openvpn multi thread then performance would really shine. It seems like I should be able to get 300Mbps on open vpen with i5. My ISP internet connection is at 180Mbps so as long as i can get that that would suffice but since i'm spending again few hundred bucks i would like to future proof it a bit and would like more. In few years this box again will be obsolete as probably internet connection will double and in circles we go. LOL. I laugh at those people that say use Pentium 4 for your pfsense router and it will rock. Haha. NOT with openvpn it won't. It sounds like best option would be to build 4.0Ghz AMD APU monster. I wouldn't mind that. That would process 600Mbps over openvpn probably. Some of the AMD are low power consumption. Maybe that's another option for future proofing a bit in mini itx form. Thoughts?
There have yet to be build a box that is sufficient for pfsense over openvpn. I'm thirsty for bandwidth. lol
Value vs performance
https://www.cpubenchmark.net/cpu_value_available.htmlhttps://www.cpubenchmark.net/singleThread.html#cpuvalue
Single Thread performance for OpenVPN performance
https://www.cpubenchmark.net/singleThread.html -
Well if the SoftEther people are to be believed, then it's much faster than OpenVPN. We should try to get that implemented in pfSense.
