Ubiquiti edgerouter lite support?

midwesttech

jimp, how much funding do you estimate this may take?

jimp

I don't know, not my area. Probably in the low-to-mid 5-figure range, if not more. It's a serious amount of work, if it can be done at all.

hidalgo

I would like to see pfSense on this device

http://www.ubnt.com/edgemax#edge-router-poe

stan-qaz

It uses a Dual-core MIPS64 processor running Debian Linux.

I'll add EdgeRouter Lite support after we ship pfSense 2.2.

PorFavor

Hey guys, it's easy to get FreeBSD on there and it runs okay, see http://rtfm.net/FreeBSD/ERL

phil.davis

EdgeRouter Lite looks really good for small office use. Having 512MB memory, instead of the Alix 256MB would make life easy. And 3 * 1GB NICs as a bonus, and this base model has:

Power 12VDC, 1A Power Adapter (Included)
Power Input 9 to 24VDC Supported Voltage Range

They admit to allowing a wide range of DC voltage, so it could be used directly on DC solar/battery.
But I certainly don't have

the low-to-mid 5-figure range, if not more

of $US - I can do it in Nepali Rupees ;)

See above, where I said I'd do it after pfSense 2.2 ships?

There are reasons.

It's not going to take someone to "fund" the project (certainly not five figures) to get it done, it's just going to take some time.
The FreeBSD support for the Edge Router Lite is based on FreeBSD 10. I don't want to have to do the backport to 8.3 (for pfSense 2.1.)
while there was some work in the pfSense build system for MIPS, it's incomplete. The build system in 2.2 should be much more flexible for cross-compiling.
when the work is done, these will be available pre-loaded on the pfSense store (http://store.pfsense.org). Not everyone will be successful loading their own, and buying one pre-loaded is a great way to support the project.
my one concern with this is that the factory firmware from UBNT has a proprietary bit of code that acts as a very fast IPv4 packet forwarding engine. This is how UBNT gets the "1mpps" numbers. I'm not going to support that, so pfSense will be "slower" than the stock firmware at forwarding IPv4 packets. Since the Cavium architecture dedicates a core to running that, pfSense will still make use of both cores, so it may be (with the multi-threaded support for pf in FreeBSD 10/pfSense 2.2) that packet filtering is faster under pfSense than the stock firmware.
I'm also unlikely to do a lot of work on making the crypto engine go fast. I'm currently concentrating on making AES-NI go fast, and that's a much larger part of the community / installed base. The FreeBSD cryptdev support for Octeon exists, and will have to be "good enough" for a while.

I've already supplied an ER Lite to all the pfSense developers. There is a box with several more sitting by my desk. ;)

@PorFavor:

Hey guys, it's easy to get FreeBSD on there and it runs okay, see http://rtfm.net/FreeBSD/ERL

Note that the work is based on FreeBSD 10.
Note that pfSense 2.2 is based on FreeBSD 10.

Would you like fries with that?

@jimp:

@midwesttech:

Someone was able to get FreeBSD running on Ubiquiti's Edgerouter Lite:

http://bsdfeed.com/discussion/180344/ubiquiti-edgerouter-lite-works-multi-user-with-current-

Nice! though it sounds like it may still be a ways away from actually being in a state that could run pfSense. His install process seems a bit complex […]

FYI, Juli Mallett (http://people.freebsd.org/~jmallett/) is female.

stan-qaz

I'm looking forward to the port, I'm fooling with mine now that I got the latest firmware into it and there are many missing features and aggravations compared to pfSense.

stephenw10

You teasing the forum again Gonzopancho? ;)
Support for alternative architectures, of any sort, is awesome. It will be very interesting to see how this performs without the FPGA/proprietary module. The link above gives just one figure for anything: 112Mbps over a single NIC. No doubt that could be improved with some polishing. Looking forward to more results… :)

Steve

PorFavor

Gonzopacho, I did not mean to offend you, very sorry if I did. I only posted the link for the guy who said it was hard to install and anyone else interested, not to impugn your hard work in any way.

phil.davis

Thanks gonzo, I didn't mean to imply that there was any rush or pressure, and I do understand those FreeBSD 10 pfSense 2.2 issues - there would be completely no point in even attempting to backport such a thing to FreeBSD 8.3 pfSense 2.1! I had just looked at the hardware specs and particularly noticed the wide range DC input of the bottom-end box.

everyone, I'm not offended.

Potentially, things won't be too bad:

http://community.ubnt.com/t5/EdgeMAX/Tolly-report/m-p/328234/highlight/true#M1794

PorFavor

Could you tell a little bit more what you know about the hardware crypto support? I installed FreeBSD on mine and /dev/crypto seems to speed up AES by 2x. Is there more hardware on there that needs support? Or only more proprietary/FPGA stuff or something?

2X seems pretty good. It depends on what you hand to the processor, of course.

I have the timings for a CN5230-700-SCP (similar, but 4 cores, instead of the 2 core in the ERL) handy:

% ./cryptotest -d cryptocteon -a aes 131072 16 32 64 128 256 512 1024 2048 4096 8192 16384 65536
2.660 sec, 262144 aes crypts, 16 bytes, 1576866 byte/sec, 12.0 Mb/sec
2.704 sec, 262144 aes crypts, 32 bytes, 3102746 byte/sec, 23.7 Mb/sec
2.631 sec, 262144 aes crypts, 64 bytes, 6376600 byte/sec, 48.6 Mb/sec
3.015 sec, 262144 aes crypts, 128 bytes, 11127423 byte/sec, 84.9 Mb/sec
3.294 sec, 262144 aes crypts, 256 bytes, 20374218 byte/sec, 155.4 Mb/sec
3.896 sec, 262144 aes crypts, 512 bytes, 34448261 byte/sec, 262.8 Mb/sec
5.240 sec, 262144 aes crypts, 1024 bytes, 51225481 byte/sec, 390.8 Mb/sec
7.921 sec, 262144 aes crypts, 2048 bytes, 67775915 byte/sec, 517.1 Mb/sec
13.078 sec, 262144 aes crypts, 4096 bytes, 82104791 byte/sec, 626.4 Mb/sec
34.394 sec, 262144 aes crypts, 8192 bytes, 62437704 byte/sec, 476.4 Mb/sec
61.838 sec, 262144 aes crypts, 16384 bytes, 69454744 byte/sec, 529.9 Mb/sec
222.462 sec, 262144 aes crypts, 65536 bytes, 77226068 byte/sec, 589.2 Mb/sec

% ./cryptotest -d cryptocteon -z 10000
0.207 sec, 20000 des crypts, 8 bytes, 771672 byte/sec, 5.9 Mb/sec
0.204 sec, 20000 des crypts, 16 bytes, 1569074 byte/sec, 12.0 Mb/sec
0.207 sec, 20000 des crypts, 32 bytes, 3090802 byte/sec, 23.6 Mb/sec
0.204 sec, 20000 des crypts, 64 bytes, 6280452 byte/sec, 47.9 Mb/sec
0.231 sec, 20000 des crypts, 128 bytes, 11065772 byte/sec, 84.4 Mb/sec
0.261 sec, 20000 des crypts, 256 bytes, 19648853 byte/sec, 149.9 Mb/sec
0.316 sec, 20000 des crypts, 512 bytes, 32406704 byte/sec, 247.2 Mb/sec
0.437 sec, 20000 des crypts, 1024 bytes, 46846443 byte/sec, 357.4 Mb/sec
0.683 sec, 20000 des crypts, 2048 bytes, 59981783 byte/sec, 457.6 Mb/sec
1.149 sec, 20000 des crypts, 4096 bytes, 71267814 byte/sec, 543.7 Mb/sec
2.934 sec, 20000 des crypts, 8192 bytes, 55844823 byte/sec, 426.1 Mb/sec
0.209 sec, 20000 3des crypts, 8 bytes, 766956 byte/sec, 5.9 Mb/sec
0.210 sec, 20000 3des crypts, 16 bytes, 1523084 byte/sec, 11.6 Mb/sec
0.209 sec, 20000 3des crypts, 32 bytes, 3065589 byte/sec, 23.4 Mb/sec
0.210 sec, 20000 3des crypts, 64 bytes, 6088686 byte/sec, 46.5 Mb/sec
0.238 sec, 20000 3des crypts, 128 bytes, 10757704 byte/sec, 82.1 Mb/sec
0.267 sec, 20000 3des crypts, 256 bytes, 19188391 byte/sec, 146.4 Mb/sec
0.322 sec, 20000 3des crypts, 512 bytes, 31841588 byte/sec, 242.9 Mb/sec
0.438 sec, 20000 3des crypts, 1024 bytes, 46730998 byte/sec, 356.5 Mb/sec
0.681 sec, 20000 3des crypts, 2048 bytes, 60152408 byte/sec, 458.9 Mb/sec
1.148 sec, 20000 3des crypts, 4096 bytes, 71336390 byte/sec, 544.3 Mb/sec
2.931 sec, 20000 3des crypts, 8192 bytes, 55898496 byte/sec, 426.5 Mb/sec
0.204 sec, 20000 aes crypts, 16 bytes, 1568774 byte/sec, 12.0 Mb/sec
0.204 sec, 20000 aes crypts, 32 bytes, 3139240 byte/sec, 24.0 Mb/sec
0.205 sec, 20000 aes crypts, 64 bytes, 6231986 byte/sec, 47.5 Mb/sec
0.230 sec, 20000 aes crypts, 128 bytes, 11135373 byte/sec, 85.0 Mb/sec
0.253 sec, 20000 aes crypts, 256 bytes, 20260538 byte/sec, 154.6 Mb/sec
0.299 sec, 20000 aes crypts, 512 bytes, 34257345 byte/sec, 261.4 Mb/sec
0.401 sec, 20000 aes crypts, 1024 bytes, 51065570 byte/sec, 389.6 Mb/sec
0.603 sec, 20000 aes crypts, 2048 bytes, 67874353 byte/sec, 517.8 Mb/sec
0.996 sec, 20000 aes crypts, 4096 bytes, 82248583 byte/sec, 627.5 Mb/sec
2.628 sec, 20000 aes crypts, 8192 bytes, 62340145 byte/sec, 475.6 Mb/sec
0.210 sec, 20000 aes192 crypts, 16 bytes, 1524238 byte/sec, 11.6 Mb/sec
0.208 sec, 20000 aes192 crypts, 32 bytes, 3073451 byte/sec, 23.4 Mb/sec
0.209 sec, 20000 aes192 crypts, 64 bytes, 6117903 byte/sec, 46.7 Mb/sec
0.236 sec, 20000 aes192 crypts, 128 bytes, 10838364 byte/sec, 82.7 Mb/sec
0.258 sec, 20000 aes192 crypts, 256 bytes, 19828438 byte/sec, 151.3 Mb/sec
0.310 sec, 20000 aes192 crypts, 512 bytes, 33049209 byte/sec, 252.1 Mb/sec
0.414 sec, 20000 aes192 crypts, 1024 bytes, 49462745 byte/sec, 377.4 Mb/sec
0.632 sec, 20000 aes192 crypts, 2048 bytes, 64853636 byte/sec, 494.8 Mb/sec
1.044 sec, 20000 aes192 crypts, 4096 bytes, 78501044 byte/sec, 598.9 Mb/sec
2.720 sec, 20000 aes192 crypts, 8192 bytes, 60235516 byte/sec, 459.6 Mb/sec
0.208 sec, 20000 aes256 crypts, 16 bytes, 1537796 byte/sec, 11.7 Mb/sec
0.209 sec, 20000 aes256 crypts, 32 bytes, 3059829 byte/sec, 23.3 Mb/sec
0.205 sec, 20000 aes256 crypts, 64 bytes, 6236449 byte/sec, 47.6 Mb/sec
0.232 sec, 20000 aes256 crypts, 128 bytes, 11014922 byte/sec, 84.0 Mb/sec
0.262 sec, 20000 aes256 crypts, 256 bytes, 19547506 byte/sec, 149.1 Mb/sec
0.316 sec, 20000 aes256 crypts, 512 bytes, 32439453 byte/sec, 247.5 Mb/sec
0.427 sec, 20000 aes256 crypts, 1024 bytes, 47990177 byte/sec, 366.1 Mb/sec
0.655 sec, 20000 aes256 crypts, 2048 bytes, 62559948 byte/sec, 477.3 Mb/sec
1.090 sec, 20000 aes256 crypts, 4096 bytes, 75147759 byte/sec, 573.3 Mb/sec
2.807 sec, 20000 aes256 crypts, 8192 bytes, 58366681 byte/sec, 445.3 Mb/sec
0.105 sec, 10000 md5 crypts, 8 bytes, 760948 byte/sec, 5.8 Mb/sec
0.104 sec, 10000 md5 crypts, 16 bytes, 1542124 byte/sec, 11.8 Mb/sec
0.097 sec, 10000 md5 crypts, 32 bytes, 3302305 byte/sec, 25.2 Mb/sec
0.110 sec, 10000 md5 crypts, 64 bytes, 5832445 byte/sec, 44.5 Mb/sec
0.117 sec, 10000 md5 crypts, 128 bytes, 10968107 byte/sec, 83.7 Mb/sec
0.128 sec, 10000 md5 crypts, 256 bytes, 20050753 byte/sec, 153.0 Mb/sec
0.155 sec, 10000 md5 crypts, 512 bytes, 33073226 byte/sec, 252.3 Mb/sec
0.209 sec, 10000 md5 crypts, 1024 bytes, 49065644 byte/sec, 374.3 Mb/sec
0.318 sec, 10000 md5 crypts, 2048 bytes, 64374782 byte/sec, 491.1 Mb/sec
0.961 sec, 10000 md5 crypts, 4096 bytes, 42634158 byte/sec, 325.3 Mb/sec
1.505 sec, 10000 md5 crypts, 8192 bytes, 54440322 byte/sec, 415.3 Mb/sec
0.103 sec, 10000 sha1 crypts, 8 bytes, 774646 byte/sec, 5.9 Mb/sec
0.098 sec, 10000 sha1 crypts, 16 bytes, 1630590 byte/sec, 12.4 Mb/sec
0.098 sec, 10000 sha1 crypts, 32 bytes, 3280167 byte/sec, 25.0 Mb/sec
0.109 sec, 10000 sha1 crypts, 64 bytes, 5893132 byte/sec, 45.0 Mb/sec
0.116 sec, 10000 sha1 crypts, 128 bytes, 11046386 byte/sec, 84.3 Mb/sec
0.126 sec, 10000 sha1 crypts, 256 bytes, 20372920 byte/sec, 155.4 Mb/sec
0.152 sec, 10000 sha1 crypts, 512 bytes, 33646801 byte/sec, 256.7 Mb/sec
0.201 sec, 10000 sha1 crypts, 1024 bytes, 50823651 byte/sec, 387.8 Mb/sec
0.300 sec, 10000 sha1 crypts, 2048 bytes, 68263254 byte/sec, 520.8 Mb/sec
0.921 sec, 10000 sha1 crypts, 4096 bytes, 44478373 byte/sec, 339.3 Mb/sec
1.421 sec, 10000 sha1 crypts, 8192 bytes, 57648975 byte/sec, 439.8 Mb/sec

PorFavor

Very cool, thanks.

This post is deleted!

Klug

Just saw this today: http://rtfm.net/FreeBSD/ERL/