Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Questions about 10 gbps nics

    Scheduled Pinned Locked Moved Hardware
    35 Posts 8 Posters 7.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bennyc
      last edited by

      Interesting topic…. But what is QAT or where does it stand for?

      4x XG-7100 (2xHA), 1x SG-4860, 1x SG-2100
      1x PC Engines APU2C4, 1x PC Engines APU1C4

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Quick Assist Technology:
        http://www.intel.com/content/www/us/en/io/quickassist-technology/quickassist-technology-developer.html

        1 Reply Last reply Reply Quote 0
        • K
          kroberts
          last edited by

          I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

          The software doesn't support it yet but it will, I'm guessing soon.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ha! Well it depends if you need the throughput. I have an OpenVPN server running here at home to use for remote access and my hardware is way too old to support Quickassist. It's still fast enough to stream Dr Who to America though so that's fine (if you ask my sister!). Fast enough to secure my traffic when I'm using public wifi also.

            Steve

            1 Reply Last reply Reply Quote 0
            • K
              Keljian
              last edited by

              @kroberts:

              I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

              The software doesn't support it yet but it will, I'm guessing soon.

              Aes-ni is more than enough for a good proportion of vpn use..

              1 Reply Last reply Reply Quote 0
              • K
                kroberts
                last edited by

                When did girls start watching Dr. Who?!!?  I've never heard of such a thing.

                Technically I don't "need" acceleration, but if you're buying hardware in anticipation of gigabit Internet and want a VPN which can even come close to that speed, you're going to need at least AES-NI.

                I'm a bit too suspicious to put all my eggs in that one basket for encryption acceleration though, which is why I'm so excited about QAT.  I also have a significant need for compression acceleration.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  @kroberts:

                  When did girls start watching Dr. Who?!!?  I've never heard of such a thing.

                  When they started giving the role to actors like David Tennant and Matt Smith.  ::)

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • V
                    vsxi-13
                    last edited by

                    @stephenw10:

                    PCIe is serial is just not over single communication medium like, say, 10base2 Ethernet.
                    I think Jim was pointing out that 10Gbit Ethernet is not half duplex unless presumably you've wired it very very wrong.  ;) A simple misunderstanding.
                    In fact my earlier post was incorrect. I said 4 lanes of PCIe 2.0 would give you 16Gbps total but in fact that's in both directions. So a 4X slot could saturate a 10Gb Ethernet link in theory if nothing else throttles the data.

                    Steve

                    I could be wrong, but I thought half duplex only worked with 10BaseT and 100BaseT networks.  As soon as we got to 1000BaseT, if the connection isn't running in full duplex it, it isn't functioning at all.

                    Regardless, I find this thread to be a very interesting read.

                    1 Reply Last reply Reply Quote 0
                    • K
                      Keljian
                      last edited by

                      Forget half duplex, what I was getting at was that you won't see the full bandwidth if you don't have the bandwidth over a PCI-e slot

                      1 Reply Last reply Reply Quote 0
                      • ?
                        Guest
                        last edited by

                        @kroberts:

                        I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

                        The software doesn't support it yet but it will, I'm guessing soon.

                        http://www.dumpaday.com/?attachment_id=58505

                        1 Reply Last reply Reply Quote 0
                        • ?
                          Guest
                          last edited by

                          @Keljian:

                          @kroberts:

                          I'm just a n00b but IMO if you're doing any sort of VPN without QAT hardware you're probably doing it wrong.

                          The software doesn't support it yet but it will, I'm guessing soon.

                          Aes-ni is more than enough for a good proportion of vpn use..

                          Probably, and it's the best you can get right now, so…

                          1 Reply Last reply Reply Quote 0
                          • ?
                            Guest
                            last edited by

                            @vsxi-13:

                            @stephenw10:

                            PCIe is serial is just not over single communication medium like, say, 10base2 Ethernet.
                            I think Jim was pointing out that 10Gbit Ethernet is not half duplex unless presumably you've wired it very very wrong.  ;) A simple misunderstanding.
                            In fact my earlier post was incorrect. I said 4 lanes of PCIe 2.0 would give you 16Gbps total but in fact that's in both directions. So a 4X slot could saturate a 10Gb Ethernet link in theory if nothing else throttles the data.

                            Steve

                            I could be wrong, but I thought half duplex only worked with 10BaseT and 100BaseT networks.  As soon as we got to 1000BaseT, if the connection isn't running in full duplex it, it isn't functioning at all.

                            Regardless, I find this thread to be a very interesting read.

                            Half-duplex gigabit links connected through hubs are allowed by the specification(*), but the relevant sections of the specification is not updated anymore and full-duplex is used exclusively with switches.

                            (*) A single repeater per collision domain is defined in IEEE 802.3 2008/2012 Section 3:41

                            1 Reply Last reply Reply Quote 0
                            • ?
                              Guest
                              last edited by

                              @stephenw10:

                              I have an OpenVPN server running here at home to use for remote access and my hardware is way too old to support Quickassist.

                              I suspect this will change soon enough.

                              1 Reply Last reply Reply Quote 0
                              • ?
                                Guest
                                last edited by

                                Hello kroberts,

                                perhaps some informations interesting for you?
                                New Boards with build in Dual 10 GbE or SFP+

                                • Tyan S5530
                                • ASRock Rack D1540D4X
                                • Supermicro X10SDV-TLN4F and X10SDV-F

                                Do you know HotLave?
                                They are producing 1 GB, 10 GB and 40 GB Intel based NICs!

                                • HotLava MultiPort NICs

                                One tip of me by side to you, build with the D-1500 based boards a pfSense based
                                firewall and with the Xeon E3 a NAS or Server, but please don´t connect the
                                pfSense based firewall direct over 10 GBit/s this will be not the best effort for the
                                throughput, you will be better going with a Infinion SX2 card, that can be connected
                                directly from the pfSense based firewall to the NAS and it will be serving more speed
                                and throughout as the 10 GBit/s SFP+ option as I see it right.

                                1 Reply Last reply Reply Quote 0
                                • ?
                                  Guest
                                  last edited by

                                  @BlueKobold:

                                  Hello kroberts,

                                  perhaps some informations interesting for you?
                                  New Boards with build in Dual 10 GbE or SFP+

                                  • Tyan S5530
                                  • ASRock Rack D1540D4X
                                  • Supermicro X10SDV-TLN4F and X10SDV-F

                                  Do you know HotLave?
                                  They are producing 1 GB, 10 GB and 40 GB Intel based NICs!

                                  • HotLava MultiPort NICs

                                  One tip of me by side to you, build with the D-1500 based boards a pfSense based
                                  firewall and with the Xeon E3 a NAS or Server, but please don´t connect the
                                  pfSense based firewall direct over 10 GBit/s this will be not the best effort for the
                                  throughput, you will be better going with a Infinion SX2 card, that can be connected
                                  directly from the pfSense based firewall to the NAS and it will be serving more speed
                                  and throughout as the 10 GBit/s SFP+ option as I see it right.

                                  We'll likely be moving to Xeon-D (Supermicro at first, something better to follow).

                                  All the HotLava 10Gbps NICs appear to be based on Intel 82599ES.  These work, but don't work as well as Fortville (Intel) or T5 (Chelsio).

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.