Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Gigabit throughput on pfSense SG 2440 / 2220?

    Hardware
    4
    6
    4009
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      techmoto last edited by

      The local ISP is rattling the cage about "gigabit coming soon to your area", so I'm looking at options to update my trusty D510 based system to something with a little more juice. I remember benching the D510 WAN-to-LAN with iperf when I first put it in and it puttered out around the 475mbit mark. Back then, no ISP would offer anything close to that so it was more than adequate, but that's not so much the case anymore it seems.

      The pfSense SG2220 and SG2440 look really nice, but there seem to be conflicting reports on if they are able move anything close to line-rate Gigabit for pure routing/NAT. I've seen a post where the 2440 dropped the directly connected throughput from 920mbit down to 580mbit through pfSense. Then a couple of people reported conflicting information that the SG2440 does full gig, no problem. Yet another post said that the 2440 would do full gig, but the 2220 would not, which really doesn't make any sense, considering the clocks between the different (yet same family) chips are the same.

      It's wasteful for me to buy a 2220/2440 if I only get to go from 475mbit on my current build to 580mbit on the entry model SG boxes. I know the units up with even beefier processors are quoted to have no problem with full gig, but they are more or less out of my price range/aren't fanless/require a rack.

      Can anyone verify if either the SG-2220 or 2440 can crack that magic 900mbit barrier?

      If not, what's the current top pick for a fanless, low-power, desktop solution for pfSense that will achieve a full 1gbe in the sub $500 price bracket, or is the order too tall for the price point?

      1 Reply Last reply Reply Quote 0
      • ?
        Guest last edited by

        The local ISP is rattling the cage about "gigabit coming soon to your area", so I'm looking at options to update my trusty D510 based system to something with a little more juice. I remember benching the D510 WAN-to-LAN with iperf when I first put it in and it puttered out around the 475mbit mark. Back then, no ISP would offer anything close to that so it was more than adequate, but that's not so much the case anymore it seems.

        It is for sure relevant to know how fast rthe Internet connection is, but also really urgent or relevant
        would it be to know what you are running on this pfSense box. It might be a big difference to run only
        a firewall or a full featured UTM device with Snort, Squid, SquidGuard, ClamAV and massively DPI enabled.

        The pfSense SG2220 and SG2440 look really nice, but there seem to be conflicting reports on if they are able move anything close to line-rate Gigabit for pure routing/NAT. I've seen a post where the 2440 dropped the directly connected throughput from 920mbit down to 580mbit through pfSense. Then a couple of people reported conflicting information that the SG2440 does full gig, no problem. Yet another post said that the 2440 would do full gig, but the 2220 would not, which really doesn't make any sense, considering the clocks between the different (yet same family) chips are the same.

        On the pfSense shop website it was declared that the SG-2200 is not capable of 1 GBit/s throughput
        but the SG-2440 is. So I would assume they know what the unit is able to do.

        It's wasteful for me to buy a 2220/2440 if I only get to go from 475mbit on my current build to 580mbit on the entry model SG boxes. I know the units up with even beefier processors are quoted to have no problem with full gig, but they are more or less out of my price range/aren't fanless/require a rack.

        Might be, that this is owed to the circumstance that the WAN port together with pppoe is only running on
        only one CPU core! But if you got a static IP address, you would be able to get more throughput at the WAN
        port.

        Can anyone verify if either the SG-2220 or 2440 can crack that magic 900mbit barrier?

        This would be also not a real concern for you, because the most configurations of us are totally different
        and we all get other numbers out of the usage of the same box. And on the 900 MBit/s mostly the overhead
        comes on top and then it would be nearly one real GBit/s, minus the SPI/NAT usage like something around
        3% - 5% but that is normal.

        If not, what's the current top pick for a fanless, low-power, desktop solution for pfSense that will achieve a full 1gbe in the sub $500 price bracket, or is the order too tall for the price point?

        Jetway Board
        Jetway box
        Intel Atom C2758 board likes the A1SRi-2758F

        It will be not so easy to get a total fan less box quiet working, and by the way a Intel Atom is able to
        hit the 1 GBit/s throughput also only with two cores, but then perhaps you will need then also fast RAM
        and something around as 8 GB DDR3 1600MHz.

        1 Reply Last reply Reply Quote 0
        • C
          cmb last edited by

          They'll all do 1 Gb, with capacity to spare, with one exception - PPPoE is tied to a single thread only, so you're looking at more like 750 Mbps on the current SG systems with PPPoE. A proper fix for that in FreeBSD is in the works, so that won't always be true, but for the time being it is.

          1 Reply Last reply Reply Quote 0
          • ?
            Guest last edited by

            A proper fix for that in FreeBSD is in the works, so that won't always be true, but for the time being it is.

            Any news when it will be inserted into pfSense or would it be able as a patch also then?

            1 Reply Last reply Reply Quote 0
            • B
              bkraptor last edited by

              Do the 4860/8860 have the same 750 Mbps limitation for PPPoE, or are they supposed to hit 1 Gbps due to higher CPU frequency?

              1 Reply Last reply Reply Quote 0
              • ?
                Guest last edited by

                Do the 4860/8860 have the same 750 Mbps limitation for PPPoE, or are they supposed to hit 1 Gbps due to higher CPU frequency?

                This thread here would be fr sure not matching to 100% of all cases and customers or countries or IPSs
                but it gives a short answer back to your question. Link 1 Link 2

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post