Hardware requirements for 10Gb/s WAN
-
Hi,
I've been running pfSense since 2006 and I have been a big fan ever since. It has been rock solid, never needed any attention and upgrades have always been smooth.
However, I'm still running it on the same hardware I bought back in 2006. At that time, I didn't skimp on hardware, but soon our internet connection can be upgraded to 8Gb/s, and I'm starting to wonder if my box can still handle that.
My pfSense router is running on a SuperMicro SYS-5019A-FTN4, with 16GiB of SuperMicro memory and an Intel enterprise SSD. Reliability was very important to me.
I wonder if the 8-core Intel Atom C2758 (?) is still up for the task. Per recommendation of ServeTheHome, I have ordered a pre-used Chelsio T520-SO-CR dual SFP+ NIC, hoping that the server-offloading will aid the CPU a bit.
Will this still cut the mosterd, or do I need to start thinking about upgrading?
Thanks in advance!
-
I wonder if the 8-core Intel Atom C2758 (?) is still up for the task.
Your link in this forum post, is showing the SuperServer 5019A-FTN4, that is sorted with an Intel Atom C3758
CPU that is running with 2.2 GHz with 8 cores.It might be that this hardware will be able to push 10 GBit/s,
but if you need a constant 10 GBit/s packet flow, I would not trust on really.I would more trust the Intel Xeon D-2100 or D-2700 CPU´s
that runs on with other cores, more cores and on the speed
of something around > 3.0 GHz. -
@dobby_ said in Hardware requirements for 10Gb/s WAN:
Your link in this forum post, is showing the SuperServer 5019A-FTN4, that is sorted with an Intel Atom C3758
CPU that is running with 2.2 GHz with 8 cores.Yes, yet pfSense reports a mere C2758, so I either fixed my box with the 'wrong' mainboard, a couple of years ago, or SuperMicro upgraded the board in this product.
Anyway, it's an 8 core Atom @2.4GHz with 4MiB of cache.
It might be that this hardware will be able to push 10 GBit/s,
but if you need a constant 10 GBit/s packet flow, I would not trust on really.Well, it's an 8GiB FTTH XGS-PON connection. On those, a fiber is split and share with multiple subscribers. I have no idea whether this 8GiB is shared among those subscribers, or it is what's available per subscriber after sharing.
I would more trust the Intel Xeon D-2100 or D-2700 CPU´s
that runs on with other cores, more cores and on the speed
of something around > 3.0 GHz.Hm, perhaps it's better to go look for a board with two on-board 10GBase-T NICs then.
I'll see how it goes, expecting the need for an upgrade. Thanks for you insights.
-
@zak-mckracken You need a Ryzen or Xeon to handle 10Gbit/s FW traffic.
An Atom cant handle that.
-
Yes, yet pfSense reports a mere C2758, so I either fixed my > box with the 'wrong' mainboard, a couple of years ago,...
There are Intel Atom C2xxx CPU´s and Intel Atom C3xxx CPU´s and brand new Inte Atom C/P5xxx
CPU´s available from Supermicro. The second generation
C2xxx I would not believe to archive 10 GBit/s with them.The C3xxx series will be soldered on Supermicro boards together with 10 Gbe and 10 Gbit/s SFP+ ports and so it might be better to start with them, but all in all I really
read much about all over the Internet and with Linux it might be running but for FreeBSD you may need some more horse power (hardware based) to archive that throughput (10 Gbe). And so I find out for my self that the Xeon D-2100 and/or Xeon D-2700 platform will be better.
Especially the Supermicro board with a N or NT in the name for networking will be offering all things you may love to have for your pfSense.- Intel QuickAssist
- Intel AES-NI
- Hyperthreading
- TurboBoost
Its all on board (on the SoC) and some of them are running nearly at 3,0 GHz too.
-
Yes, I would expect to see 3-4Gbps from a C2758 with firewall and NAT. There are many variables of course.
