Gigabit throughput on pfSense SG 2440 / 2220?



  • The local ISP is rattling the cage about "gigabit coming soon to your area", so I'm looking at options to update my trusty D510 based system to something with a little more juice. I remember benching the D510 WAN-to-LAN with iperf when I first put it in and it puttered out around the 475mbit mark. Back then, no ISP would offer anything close to that so it was more than adequate, but that's not so much the case anymore it seems.

    The pfSense SG2220 and SG2440 look really nice, but there seem to be conflicting reports on if they are able move anything close to line-rate Gigabit for pure routing/NAT. I've seen a post where the 2440 dropped the directly connected throughput from 920mbit down to 580mbit through pfSense. Then a couple of people reported conflicting information that the SG2440 does full gig, no problem. Yet another post said that the 2440 would do full gig, but the 2220 would not, which really doesn't make any sense, considering the clocks between the different (yet same family) chips are the same.

    It's wasteful for me to buy a 2220/2440 if I only get to go from 475mbit on my current build to 580mbit on the entry model SG boxes. I know the units up with even beefier processors are quoted to have no problem with full gig, but they are more or less out of my price range/aren't fanless/require a rack.

    Can anyone verify if either the SG-2220 or 2440 can crack that magic 900mbit barrier?

    If not, what's the current top pick for a fanless, low-power, desktop solution for pfSense that will achieve a full 1gbe in the sub $500 price bracket, or is the order too tall for the price point?



  • The local ISP is rattling the cage about "gigabit coming soon to your area", so I'm looking at options to update my trusty D510 based system to something with a little more juice. I remember benching the D510 WAN-to-LAN with iperf when I first put it in and it puttered out around the 475mbit mark. Back then, no ISP would offer anything close to that so it was more than adequate, but that's not so much the case anymore it seems.

    It is for sure relevant to know how fast rthe Internet connection is, but also really urgent or relevant
    would it be to know what you are running on this pfSense box. It might be a big difference to run only
    a firewall or a full featured UTM device with Snort, Squid, SquidGuard, ClamAV and massively DPI enabled.

    The pfSense SG2220 and SG2440 look really nice, but there seem to be conflicting reports on if they are able move anything close to line-rate Gigabit for pure routing/NAT. I've seen a post where the 2440 dropped the directly connected throughput from 920mbit down to 580mbit through pfSense. Then a couple of people reported conflicting information that the SG2440 does full gig, no problem. Yet another post said that the 2440 would do full gig, but the 2220 would not, which really doesn't make any sense, considering the clocks between the different (yet same family) chips are the same.

    On the pfSense shop website it was declared that the SG-2200 is not capable of 1 GBit/s throughput
    but the SG-2440 is. So I would assume they know what the unit is able to do.

    It's wasteful for me to buy a 2220/2440 if I only get to go from 475mbit on my current build to 580mbit on the entry model SG boxes. I know the units up with even beefier processors are quoted to have no problem with full gig, but they are more or less out of my price range/aren't fanless/require a rack.

    Might be, that this is owed to the circumstance that the WAN port together with pppoe is only running on
    only one CPU core! But if you got a static IP address, you would be able to get more throughput at the WAN
    port.

    Can anyone verify if either the SG-2220 or 2440 can crack that magic 900mbit barrier?

    This would be also not a real concern for you, because the most configurations of us are totally different
    and we all get other numbers out of the usage of the same box. And on the 900 MBit/s mostly the overhead
    comes on top and then it would be nearly one real GBit/s, minus the SPI/NAT usage like something around
    3% - 5% but that is normal.

    If not, what's the current top pick for a fanless, low-power, desktop solution for pfSense that will achieve a full 1gbe in the sub $500 price bracket, or is the order too tall for the price point?

    Jetway Board
    Jetway box
    Intel Atom C2758 board likes the A1SRi-2758F

    It will be not so easy to get a total fan less box quiet working, and by the way a Intel Atom is able to
    hit the 1 GBit/s throughput also only with two cores, but then perhaps you will need then also fast RAM
    and something around as 8 GB DDR3 1600MHz.



  • They'll all do 1 Gb, with capacity to spare, with one exception - PPPoE is tied to a single thread only, so you're looking at more like 750 Mbps on the current SG systems with PPPoE. A proper fix for that in FreeBSD is in the works, so that won't always be true, but for the time being it is.



  • A proper fix for that in FreeBSD is in the works, so that won't always be true, but for the time being it is.

    Any news when it will be inserted into pfSense or would it be able as a patch also then?



  • Do the 4860/8860 have the same 750 Mbps limitation for PPPoE, or are they supposed to hit 1 Gbps due to higher CPU frequency?



  • Do the 4860/8860 have the same 750 Mbps limitation for PPPoE, or are they supposed to hit 1 Gbps due to higher CPU frequency?

    This thread here would be fr sure not matching to 100% of all cases and customers or countries or IPSs
    but it gives a short answer back to your question. Link 1 Link 2


Log in to reply