RTL8156B USB 2.5GB NIC
-
The Background, New to pfsense and FreeBSD but not linux / Unix.
I have tried the latest version of pfsense 2.6 and got the USB NIC to transfer at reasonable speeds in one direction. I tried the developer release but the performance is worse around 600mbs down and 67 up. with the 2.6 release version the speeds were 2100 mbs down and 933mbs up.I know to get these usb nics to work properly on linux you need to run the command
ethtool -s eth0 autoneg on advertise 0x80000000002f
or
ethtool -s eth0 autoneg on advertise 0x802fdepending on the kernel version
I know there is no ethtool for freebsd, and all the recommendations are to force via ifconfig, which just throws an error.
I have read about sysctl to set the value for intel card
sysctl -x dev.ix.0.advertise_speedwhen ever i do a sysctl -a there is no advertise speed setting apart from
hw.ix.advertise_speed: 0i.e not my hardware,
Any one any idea how i can run the equitant command on freebsd as the ethtool command
Many Thanks
-
Which driver is it using?
Some of those devices will come up and work using the generic cdc_ether driver but can also use the specific driver which often given access to more config and status.
Try connecting it after boot and see that the logs show.
The driver may have changed in the 2.7 dev snapshots.
I will say though that USB Ethernet is generally pretty bad in pfSense/FreeBSD so there may not be too much we do there.
Steve
-
@aw-pfsense said in RTL8156B USB 2.5GB NIC:
I tried the developer release but the performance is
worse around 600mbs down and 67 up.It is developer release and not more! There can something change much until it will be released.
with the 2.6 release version the speeds were
2100 mbs down and 933mbs up.Then I would go with the 2.6 stable because the numbers are much pretty well looking to me.
-
Its the cdce0 driver, which looking around is the only way to make usb nic work on freebsd.
This was only a test to see how pfsense worked before I purchased the Netgate 6100 gateway, as $800 is a lot to loose on a guess if it will work. Never mind.
I know i can get 2.36 both with with ubuntu
Thanks Any way -
@dobby_
Thanks but i need to get closer to 2GB duplex with Natting -
In both 2.6 and 2.7?
Performance in 2.7 will be significantly reduced currently because we have a number of debugging options enabled. It's possible you're hitting that.
Steve
-
Its the cdce0 driver, which looking around is the only
way to make usb nic work on freebsd.I use a USB to RJ45 GB LAN Adapter only to connect from
PC or Laptop or MacBook to pfSense, ClearOS or other
appliances. So it must be only supported by the OS on the
PC, MacBook or Laptop.This was only a test to see how pfsense worked before I > purchased the Netgate 6100 gateway,
You test with 2.7 developer release on a different hardware
to see what you will be getting out from a Netgate 6100?as $800 is a lot to loose on a guess if it will work. Never > mind.
For sure I am with you at this point, but the Netgate 6100 is capable of 18 GB per second in Layer 3 routing.
It is sorted with much Ports around 10 if I am not wrong
and it brings 10 GBs and 5 GBs and 2,5 GBs and 1 GBs
free configurable SFP / RJ45 PortsI know i can get 2.36 both with with ubuntu
???
-
@dobby_ A lot of this is to test the capabilities of pfsense as well of pure speed. I need to bond wan connection , plus a lot of complex routing along with both standard DNAT and SNAT. All at 2Gbs per second in duplex mode. On top of that i need firewall rules and routing to many internal subnets. Plus i need to confirm everything works not just on the router but also the kit it connects to. I'm well aware that the 6100 is rated at 18Gbits per second but that is pure routing. Natting is heavy on the CPU, so this figure will drop dramatically. The different hardware will allow be to test the capabilities and allow some limited estimations of performance for my use cases when the hardware is compared.. This is more than just a perforce comparison. If either the s/w or hardware is not capable its not for me.
I have tested with Ubuntu to confirm of the network and h/w i'm using is capable of the speed. That's the only reason for that. Given the hardware I'm using is more powerful than the 6100, if it cant cope this is not generally good for lower powered h/w
I'm just trying to solve some technical issues i am coming across as I test the capabilities.
-
To be clear you should be able to see the 2.5GbE line rate (~2.3Gbps) between two of the igc ports on the 6100 no problem.
Steve
-
The different hardware will allow be to test the
capabilities and allow some limited estimations of
performance for my use cases when the hardware is
compared..Ok
This is more than just a perforce comparison. If either
the s/w or hardware is not capable its not for me.Ok I understand
I have tested with Ubuntu to confirm of the network
and h/w i'm using is capable of the speed.Ubuntu is doing normally the following, if configurated!
- SPI = netfilter in Linux
- NAT = Network address translation
It is fast and not really comparable to an firewall, it is what a pure router is doing! Please don´t forget this.
pfSense has also NAT, but it a later part of the packet filter
(pf) where the names (pfSense) comes from.And the packet filter is doing more, it is working over any packet firewall rules based action, so it needs more time and power. The hardware should be a little bit stronger!
That's the only reason for that. Given the hardware I'm
using is more powerful than the 6100, if it cant cope
this is not generally good for lower powered h/wIn some cases we use here the following setup, matching nearly any needs and/or without any problems running
no, some or featured UTM (pfSense), you can really trust on.-
Intel Xeon E3-12xxv3/4/5/6 with 8 / 16 / 32 GB
You can add all adapters you need
~500 € - 1000 € -
Supermicro Intel Atom C3000 8 / 12 / 16 Core
Power saving and fast enough, with M.2 and WiFi slot
~1000 € - 2000 € -
Supermicro Intel Xeon D-2100 series
With, M.2 SSD, WiFi and modem + SIM slot -
Supermicro Intel Xeon D-2700 series
With, M.2 SSD, WiFi and modem + SIM slot
~1500 € - 3000 €
It is not cheap, but if you need the power you may not
looking in the cheaper corner and if this must run 24/7
you may not willing in Intel Core iCPU series.But the most think is that you may fiddle out one or two
days that all is matching to your hardware and this comes
normally on top of all! What is some ones hour price?
What is one or two days price on top of all, and now the prices from the Netgate appliances are not anymore so
high as many state here in the forum often.You may be not missing something you want to install!
Squid & SuiqdGuard, ClamAV, Snort, pfBlocker-NG, tinc,
stunnel, acme, lightsquid and vpn packets runningfast!I'm just trying to solve some technical issues i am
coming across as I test the capabilities.Then I would really suggest to go with an installation of pfSense either 2.6 or 2.7 to get a better feeling to this
given power of the hardware.