Which CPU to use for 100-200 mbps site to site VPN throughput for a mini-itx?



  • I'd like to build two mini-itx pfsense boxes for site to site VPN.

    Motherboard:
    Intel® Server Board S1200KPR mini-itx with on board dual nics. $150.00

    Ram:
    Crucial 8GB Kit (4GBx2), 240-pin DIMM, DDR3 PC3-8500 memory module $80.00
    DDR3 PC3-8500 • CL=7 • Unbuffered • ECC • DDR3-1066 • 1.5V • 512Meg x 72 •

    Internal SSD:
    Intel brand?  Size?

    CPU:
    Which CPU would provide an 100 - 200 mbps site to site VPN throughput?

    For fun, what would the site to site VPN throughput be using Intel® Xeon® Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00?

    Intel® Server Board S1200KPR mini-itx
    http://ark.intel.com/products/67346/Intel-Server-Board-S1200KPR

    CPUs that are supported on this motherboard;

    Intel® Xeon® Processor E3-1220 (8M Cache, 3.10 GHz) $210.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1220L (3M Cache, 2.20 GHz) $211.00 20 Watts

    Intel® Xeon® Processor E3-1225 (6M Cache, 3.10 GHz) $212.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1230 (8M Cache, 3.20 GHz) $240.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1235 (8M Cache, 3.20 GHz) $261.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1240 (8M Cache, 3.30 GHz) $265.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1245 (8M Cache, 3.30 GHz) $280.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1260L (8M Cache, 2.40 GHz) $580.00 45 Watts

    Intel® Xeon® Processor E3-1270 (8M Cache, 3.40 GHz) $340.00 80 Watts (Newegg)

    Intel® Xeon® Processor E3-1275 (8M Cache, 3.40 GHz) $373.00 95 Watts (Newegg)

    Intel® Xeon® Processor E3-1280 (8M Cache, 3.50 GHz) $675.00 95 Watts

    Intel® Xeon® Processor E3-1290 (8M Cache, 3.60 GHz) $947.00

    Intel® Celeron® Processor G440 (1M Cache, 1.60 GHz) $40.00 35 Watts

    Intel® Celeron® Processor G530 (2M Cache, 2.40 GHz) $50.00 65 Watts (Newegg)

    Intel® Celeron® Processor G530T (2M Cache, 2.00 GHz) $58.00 35 Watts

    Intel® Celeron® Processor G540 (2M Cache, 2.50 GHz) $43.00 65 Watts

    Intel® Core™ i3-2100 Processor (3M Cache, 3.10 GHz) $105.00 65 Watts

    Intel® Core™ i3-2100T Processor (3M Cache, 2.50 GHz) $138.00 35 Watts

    Intel® Core™ i3-2102 Processor (3M Cache, 3.10 GHz) $255.00 65 Watts

    Intel® Core™ i3-2105 Processor (3M Cache, 3.10 GHz) $160.00 65 Watts

    Intel® Core™ i3-2120 Processor (3M Cache, 3.30 GHz) $108.00 65 Watts

    Intel® Core™ i3-2120T Processor (3M Cache, 2.60 GHz) $108.00 35 Watts

    Intel® Core™ i3-2125 Processor (3M Cache, 3.30 GHz) $137.00 65 Watts

    Intel® Core™ i3-2130 Processor (3M Cache, 3.40 GHz) $142.00 65 Watts

    Intel® Pentium® Processor G620 (3M Cache, 2.60 GHz) $58.00 65 Watts

    Intel® Pentium® Processor G620T (3M Cache, 2.20 GHz) $89.00 35 Watts

    Intel® Pentium® Processor G630 (3M Cache, 2.70 GHz) $63.00 65 Watts

    Intel® Pentium® Processor G630T (3M Cache, 2.30 GHz) $73.00 35 Watts

    Intel® Pentium® Processor G840 (3M Cache, 2.80 GHz) $89.00 65 Watts

    Intel® Pentium® Processor G850 (3M Cache, 2.90 GHz) $72.00 65 Watts

    Intel® Pentium® Processor G860 (3M Cache, 3.00 GHz) $83.00 65 Watts

    Intel® Xeon® Processor E3-1290V2 (8M Cache, 3.70 GHz) $971.00 87 Watts

    Intel® Xeon® Processor E3-1280V2 (8M Cache, 3.60 GHz) $640.00 69 Watts (Newegg)

    Intel® Xeon® Processor E3-1275V2 (8M Cache, 3.50 GHz) $370.00 77 Watts (Newegg)

    Intel® Xeon® Processor E3-1270V2 (8M Cache, 3.50 GHz) $355.00 69 Watts

    Intel® Xeon® Processor E3-1265LV2 (8M Cache, 2.50 GHz) $330.00 45Watts (Newegg)

    Intel® Xeon® Processor E3-1245V2 (8M Cache, 3.40 GHz) $271.00 77 Watts

    Intel® Xeon® Processor E3-1240V2 (8M Cache, 3.40 GHz) $268.00 69 Watts (Newegg)

    Intel® Xeon® Processor E3-1230V2 (8M Cache, 3.30 GHz) $240.00 69Watts (Newegg)

    Intel® Xeon® Processor E3-1225V2 (8M Cache, 3.20 GHz) $235.00 77Watts (Newegg)

    Intel® Xeon® Processor E3-1220V2 (8M Cache, 3.10 GHz) $220.00 69Watts (Newegg)

    Intel® Xeon® Processor E3-1220LV2 (3M Cache, 2.30 GHz) $220.00 17 Watts



  • Have you considered a supported VPN accelerator card on each end instead of high end CPUs?



  • From what I've read…the VPN accelerator card would slow down a high end CPU!

    Also, I've read that it is a better value for over all performance to spend money on a faster CPU instead of purchasing a VPN accelerator card?



  • Maybe this information is no longer current?

    From the Hardware Sizing Guidance page:

    Feature Considerations
    Most features do not factor into hardware sizing, though a few have significant impact on hardware utilization.

    VPN - Heavy use of any of the VPN services included in pfSense will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. A 266 MHz CPU will max out at around 4 Mbps of IPsec throughput, a 500 MHz CPU can push 10-15 Mbps of IPsec, and relatively new server hardware (Xeon 800 FSB and newer) deployments are pushing over 100 Mbps with plenty of capacity to spare. Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements.



  • @noob12344321:

    From what I've read…the VPN accelerator card would slow down a high end CPU!

    Would depend on which one you get… If you get a Xeon and a vpn1411, then, yes :)
    If you get, say a DX1845, I'd say that would be faster :P

    Anyway: modern Intel chips, have AES instructions built-in, should be plenty fast :D
    http://en.wikipedia.org/wiki/AES_instruction_set
    will be supported in 2.1:
    http://forum.pfsense.org/index.php/topic,51367.msg275362.html#msg275362

    Until then the i3/Xeon itself should be able to do 200Mbps, I would say, but with a bit higher cpu load.


Locked