Pfsense 2.0 VS Checkpoint.

[David Handelman]

Hi All,
I'm currently moving to 10G Ethernet.
I decided to test PFsense vs Checkpoint using 10G and 1G interfaces.
Checkpoint provided me a huge 1U appliance for testing. based on Nokia IPSO and CPR65.
The Pfsense was running on Dell R-210 Xeon 2.4Ghz with Myricom 10G nics. Pfsense AMD64 version 2.0 beta5.

Part of the numbers bellow are from my memory I'm not in the office untill next week,, but it's very very close to that.. I will adjust it next week to be 100% accurate.

All the numbers are in Micro Seconds.
10G Test
I had two servers that already connected to a few switches.
I have disconnected one server from the switch and put a firewall between the server and the switch.

The only change I made at the PFsense was adjusting the Coalescing on the nics to "1" (1 Micro second).
Checkpoint and Pfsense had the same rules and the same logging options.

A udp test similar to the netperf TCP_RR shows the following.
PFsense 32.053 Us
Checkpoint 34.315 Us

TCP Test-Netperf TCP_rr Test
Pfsense 14500 PPS
Checkpoint 13600 PPS

Multicast test.

On the average PFsense and Checkpoint are the same, but the standard deviation on the PFsense is a little bit higher.

Checkpoint
41 Us
Standard deviation 4 Us

PFsense
41 US
Standard deviation 6 Us

1G Test.
On this test I have used two Dell R610 servers connected to directly to the firewall no switch at all.

A udp test similar to the netperf TCP_RR shows the following.

PFsesne 34 Us
Checkpoint 62 Us

TCP Test-Netperf TCP_rr Test

PFsense 13400 PPS
Checkpoint 7600 PPS.

YES on 1G interfaces the Pfsense is two times faster… i have verified this a few times, checking the nics duplex, speed and run it a few times all looks correct.

Bottom line.
PFSense is 2 Micro second faster while using 10G and 30 Micro seconds faster while using 1G interfaces..
The Checkpoint price is around 40K$ with unlimited IP and cluster support.
The Dell R-210 with the 10G nic around 1500$

REMARKS:
I have tested the most important things for my usage only.
The test is relative (On the 10G the numbers include switches as well).

PFsense TEAM
THANK YOU FOR THIS GREAT PRODUCT….......