Which CPU to use for 100-200 mbps site to site VPN throughput for a mini-itx?
-
I'd like to build two mini-itx pfsense boxes for site to site VPN.
Motherboard:
IntelServer Board S1200KPR mini-itx with on board dual nics. $150.00
Ram:
Crucial 8GB Kit (4GBx2), 240-pin DIMM, DDR3 PC3-8500 memory module $80.00
DDR3 PC3-8500 • CL=7 • Unbuffered • ECC • DDR3-1066 • 1.5V • 512Meg x 72 •Internal SSD:
Intel brand? Size?CPU:
Which CPU would provide an 100 - 200 mbps site to site VPN throughput?For fun, what would the site to site VPN throughput be using Intel
Xeon
Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00?
Intel
Server Board S1200KPR mini-itx
http://ark.intel.com/products/67346/Intel-Server-Board-S1200KPRCPUs that are supported on this motherboard;
Intel
Xeon
Processor E3-1220 (8M Cache, 3.10 GHz) $210.00 80 Watts (Newegg)
Intel
Xeon
Processor E3-1220L (3M Cache, 2.20 GHz) $211.00 20 Watts
Intel
Xeon
Processor E3-1225 (6M Cache, 3.10 GHz) $212.00 95 Watts (Newegg)
Intel
Xeon
Processor E3-1230 (8M Cache, 3.20 GHz) $240.00 80 Watts (Newegg)
Intel
Xeon
Processor E3-1235 (8M Cache, 3.20 GHz) $261.00 95 Watts (Newegg)
Intel
Xeon
Processor E3-1240 (8M Cache, 3.30 GHz) $265.00 80 Watts (Newegg)
Intel
Xeon
Processor E3-1245 (8M Cache, 3.30 GHz) $280.00 95 Watts (Newegg)
Intel
Xeon
Processor E3-1260L (8M Cache, 2.40 GHz) $580.00 45 Watts
Intel
Xeon
Processor E3-1270 (8M Cache, 3.40 GHz) $340.00 80 Watts (Newegg)
Intel
Xeon
Processor E3-1275 (8M Cache, 3.40 GHz) $373.00 95 Watts (Newegg)
Intel
Xeon
Processor E3-1280 (8M Cache, 3.50 GHz) $675.00 95 Watts
Intel
Xeon
Processor E3-1290 (8M Cache, 3.60 GHz) $947.00
Intel
Celeron
Processor G440 (1M Cache, 1.60 GHz) $40.00 35 Watts
Intel
Celeron
Processor G530 (2M Cache, 2.40 GHz) $50.00 65 Watts (Newegg)
Intel
Celeron
Processor G530T (2M Cache, 2.00 GHz) $58.00 35 Watts
Intel
Celeron
Processor G540 (2M Cache, 2.50 GHz) $43.00 65 Watts
Intel
Core
i3-2100 Processor (3M Cache, 3.10 GHz) $105.00 65 Watts
Intel
Core
i3-2100T Processor (3M Cache, 2.50 GHz) $138.00 35 Watts
Intel
Core
i3-2102 Processor (3M Cache, 3.10 GHz) $255.00 65 Watts
Intel
Core
i3-2105 Processor (3M Cache, 3.10 GHz) $160.00 65 Watts
Intel
Core
i3-2120 Processor (3M Cache, 3.30 GHz) $108.00 65 Watts
Intel
Core
i3-2120T Processor (3M Cache, 2.60 GHz) $108.00 35 Watts
Intel
Core
i3-2125 Processor (3M Cache, 3.30 GHz) $137.00 65 Watts
Intel
Core
i3-2130 Processor (3M Cache, 3.40 GHz) $142.00 65 Watts
Intel
Pentium
Processor G620 (3M Cache, 2.60 GHz) $58.00 65 Watts
Intel
Pentium
Processor G620T (3M Cache, 2.20 GHz) $89.00 35 Watts
Intel
Pentium
Processor G630 (3M Cache, 2.70 GHz) $63.00 65 Watts
Intel
Pentium
Processor G630T (3M Cache, 2.30 GHz) $73.00 35 Watts
Intel
Pentium
Processor G840 (3M Cache, 2.80 GHz) $89.00 65 Watts
Intel
Pentium
Processor G850 (3M Cache, 2.90 GHz) $72.00 65 Watts
Intel
Pentium
Processor G860 (3M Cache, 3.00 GHz) $83.00 65 Watts
Intel
Xeon
Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00 87 Watts
Intel
Xeon
Processor E3-1280V2 (8M Cache, 3.60 GHz) $640.00 69 Watts (Newegg)
Intel
Xeon
Processor E3-1275V2 (8M Cache, 3.50 GHz) $370.00 77 Watts (Newegg)
Intel
Xeon
Processor E3-1270V2 (8M Cache, 3.50 GHz) $355.00 69 Watts
Intel
Xeon
Processor E3-1265LV2 (8M Cache, 2.50 GHz) $330.00 45Watts (Newegg)
Intel
Xeon
Processor E3-1245V2 (8M Cache, 3.40 GHz) $271.00 77 Watts
Intel
Xeon
Processor E3-1240V2 (8M Cache, 3.40 GHz) $268.00 69 Watts (Newegg)
Intel
Xeon
Processor E3-1230V2 (8M Cache, 3.30 GHz) $240.00 69Watts (Newegg)
Intel
Xeon
Processor E3-1225V2 (8M Cache, 3.20 GHz) $235.00 77Watts (Newegg)
Intel
Xeon
Processor E3-1220V2 (8M Cache, 3.10 GHz) $220.00 69Watts (Newegg)
Intel
Xeon
Processor E3-1220LV2 (3M Cache, 2.30 GHz) $220.00 17 Watts
-
Have you considered a supported VPN accelerator card on each end instead of high end CPUs?
-
From what I've read…the VPN accelerator card would slow down a high end CPU!
Also, I've read that it is a better value for over all performance to spend money on a faster CPU instead of purchasing a VPN accelerator card?
-
Maybe this information is no longer current?
From the Hardware Sizing Guidance page:
Feature Considerations
Most features do not factor into hardware sizing, though a few have significant impact on hardware utilization.VPN - Heavy use of any of the VPN services included in pfSense will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. A 266 MHz CPU will max out at around 4 Mbps of IPsec throughput, a 500 MHz CPU can push 10-15 Mbps of IPsec, and relatively new server hardware (Xeon 800 FSB and newer) deployments are pushing over 100 Mbps with plenty of capacity to spare. Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements.
-
From what I've read…the VPN accelerator card would slow down a high end CPU!
Would depend on which one you get… If you get a Xeon and a vpn1411, then, yes :)
If you get, say a DX1845, I'd say that would be faster :PAnyway: modern Intel chips, have AES instructions built-in, should be plenty fast :D
http://en.wikipedia.org/wiki/AES_instruction_set
will be supported in 2.1:
http://forum.pfsense.org/index.php/topic,51367.msg275362.html#msg275362Until then the i3/Xeon itself should be able to do 200Mbps, I would say, but with a bit higher cpu load.