Shuttle DS57U (Broadwell & Dual Intel NICs)

Guest

BIOS issue, likely.

Guest

@gonzopancho:

$217 (US) + 2 x $21 for 4GB ram, + call it $8 for a 4GB SD card. $269

This .vs http://store.netgate.com/ADI/RCC-DFF-2220.aspx at $275 which has:

Why did you include 4GB of RAM to compare it to a 2GB system?

I agree with JPS.pfsense that you are being dishonest in your comparison.

Because unless I'm mistaken, you can't run a single DIMM in that board. If I'm wrong, the Shuttle is at $248. I hope you get the AES-NI fixed.

Guest

Might I add that I have no less than three junk Shuttle cases that used custom power supplies. They make OK gear but 24/7 embedded class, I don't think so. Maybe you will get lucky and it will last. Shuttle makes nice gear, just not embedded specialty gear.

Guest

And how about goodies like an M.2 slot and SIM socket. Totally purpose built machinery.

JPS.pfsense

@Phishfry:

Might I add that I have no less than three junk Shuttle cases that used custom power supplies. They make OK gear but 24/7 embedded class, I don't think so. Maybe you will get lucky and it will last. Shuttle makes nice gear, just not embedded specialty gear.

So the power supply was the reason for malfunction in all three cases?

Guest

One bad power supply and two bad motherboards. Different generations as well from G2 to K45. I really do like thier cases. This was my choice for htpc/geexbox along with Aopen slim boxes. I have had better luck with Aopen personally…

robi

What's the max speed you can achieve NATting between the two interfaces, and with what CPU usage/load?

A Former User

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

Shonky

@hedsht:

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

That's not true according to Intel. Sounds like BS to me. I was about to go and buy one until hearing that…
http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

A Former User

@Shonky:

@hedsht:

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

That's not true according to Intel. Sounds like BS to me. I was about to go and buy one until hearing that…
http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

i've talked with the intel support as well, the celeron does support aes-ni, but its up to the manufacturer which version he uses and apparently shuttle took the one without aes-ni in this case.

cpu.png_thumb

mobo.png_thumb

kejianshi

Was you CPU maxed out all the time?

Just because AES acceleration isn't supported on chip doesn't mean the box can't do a good job depending on bandwidth you need supported.

Not that this would be my go-to box to begin with but if I already had one, it would have to be incapable of doing the job for me to unplug it.

Shonky

@hedsht:

@Shonky:

@hedsht:

i'm not using this one as a pfsense box anymore, because AES-NI is not supported.

had a really nice chat with the shuttle support and they confirmed that the celeron they used doesnt support AES-NI, its not a bios issue.
but, later this year shuttle will release a i3 & i5 version which will definitely support AES-NI.

That's not true according to Intel. Sounds like BS to me. I was about to go and buy one until hearing that…
http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

i've talked with the intel support as well, the celeron does support aes-ni, but its up to the manufacturer which version he uses and apparently shuttle took the one without aes-ni in this case.

That doesn't really make sense. The model supports it. If there's a version that doesn't then well it's a different model surely.

@kejianshi:

Was you CPU maxed out all the time?

Just because AES acceleration isn't supported on chip doesn't mean the box can't do a good job depending on bandwidth you need supported.

Not that this would be my go-to box to begin with but if I already had one, it would have to be incapable of doing the job for me to unplug it.

What don't you like about it?

edwardwong

@JPS.pfsense:

@gonzopancho:

This .vs http://store.netgate.com/ADI/RCC-DFF-2220.aspx at $275 which has:

more clockrate (1.7GHz .vs 1.5GHz)

Atom 1,7Ghz vs. Celeron 1,5GHz - this should be a clear win for the Celeron. It's ok to list advantages of your solution, but comparing the clock rate feels like cheating in that case.

less power consumption (TDP 6W .vs 15W

€15 difference per year (24/7)

better Ethernets

Can you explain the difference?

Shuttle is only spec-ed to 40C, 2220 is spec-ed to 65C

The main advantage is, that the Shuttle system is available in Germany. Other solutions often have to be imported.

Don't just look at the names, Intel C2350 is a member of Rangeley/Avoton (Silvermount series) which has server grade quality (The fastest C2750, octa-core Atom, was tested to be almost on par with previous generation 4C8T Xeon L5520, but TDP is just 1/3).
Definitely both CPU can do 1Gbps NAT throughput, while C2350 has turbo frequency up to 2GHz to make it even faster.

A Former User

@Shonky:

That doesn't really make sense. The model supports it. If there's a version that doesn't then well it's a different model surely.

i can only say, what i've been told by the shuttle support. there isnt a bios setting to enable or disable AES-NI and i've tested FreeBSD 10.1, Ubuntu 14.04 and Windows 7 and none of them showed AES-NI Support.

So its either disabled on this CPU (maybe to save power?) or my particular cpu doesnt support AES-NI.

I went back to my D2500CC as a PfSense Firewall and am using the Shuttle DS57U as a Ubuntu Webserver for web development now.

UnEsxi

Beware everything about Shuttle. I;ve used literally 50 of them in production over the years and have struck so many esoteric problems form board design faults to power supply problems (with eery different box/PSU I've had from them) and also strange case designs that make repair/replacement and moving components hard to do.

I've found their support to be appallingly lacking in almost every instance. In EU maybe it is better, in Taiwan it is not. Face saving has presented me with nothing but duplicated excuses and round robin discussions.

They are very windows centric, so using any other OS is a foreign concept and untested.

They're a but like Sony. Hardware developers that develop and test in 'Doze, and are still learning about how IMHO…

FlyingBob

I'm following this topic too, since I ordered two DS57U last week (haven't arrived yet)…
I wanted to use them for pfsense with OpenVPN AES encrypted tunneling, etc... So I specifically wanted a CPU with AES-NI.

Now, yesterday 30/03/2015, I'm SURE that it was stated on the Intel ARK website that the Intel Celeron 3205U supported AES-NI.

Today, when I check the Intel ARK page again, it is simply stated that this CPU does NOT support AES-NI. Intel, what's going on?

http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz
http://oi62.tinypic.com/14t6gyb.jpg

Screenshot attached of today...

Intel screwed us?

doktornotor

@FlyingBob:

Now, yesterday 30/03/2015, I'm SURE that it was stated on the Intel ARK website that the Intel Celeron 3205U supported AES-NI.
Today, when I check the Intel ARK page again, it is simply stated that this CPU does NOT support AES-NI. Intel, what's going on?
Intel screwed us?

And here's the proof for your RMA. :P

http://web.archive.org/web/20150205185342/http://ark.intel.com/products/84809/Intel-Celeron-Processor-3205U-2M-Cache-1_50-GHz

FlyingBob

My two DS57U units arrived. I did some quick testing and I wanted to share the results (which are not too disappointing in my opinion).

I have twice the following hardware configuration:

1x SHUTTLE DS57U, Intel Celeron 3205U
1x Crucial M550 SSD 128GB mSATA (CT128M550SSD3)
2x 4 GB SO DDR3 1600 CL9 Crucial (BLS4G3N169ES4CEU)

I have installed the following software on both devices:

Debian 7.8
OpenVPN 2.3.6

I have used the following command to test the bandwith:

dd if=/dev/urandom of=/tmp/urandom.dat bs=1M count=1000
iperf -c iperf-server -F /tmp/urandom.dat

I use a random data file as source for the speed test, since the comp-lzo parameters could compress the tunnel. With the speed command above, there is no difference in results with "comp-lzo yes" or "comp-lzo no".
If an OpenVPN tunnel is used, it is a UDP tunnel.

My results are as follows:

Shuttle 1 (S1) directly attached to Shuttle 2(S2), no tunnel (no OpenVPN)
Speed: 950 Mbit/s

S1 to S2, OpenVPN, no encryption
Speed: 900 Mbit/s

S1 to S2, OpenVPN, AES-128-CBC
Speed: 210 Mbit/s

S1 to S2, OpenVPN, AES-256-CBC
Speed: 195 Mbit/s

Now I know this isn't a full firewall/router test, since I only use one interface on each device. I also haven't used FreeBSD (pfSense), since I wanted to do a quick test to see if it would be possible to obtain > 100 Mbit/s speed with AES256. It seems like this is the case.

In the near future, I plan to have this configuration set up as a complete pfSense firewall.

Heraz

The Message I got from Intel:

Hello Roland,

Thank you for your email. The AES-NI information that is currently visible on the ARK site for the Intel Celeron Processor 3205U is incorrect. The specification has been changed in our system to show that this processor does not support AES-NI and the ARK site will be updated with this information later today. We appreciate that you took the time to send us a message, and apologize for the inconvenience.

Best regards,
Lori Yung
ARK Support
ark.intel.com

kejianshi

Apologize for the inconvenience? HAHA…

How about "Send me a freaking board/CPU combo that fits my needs."