even for the sites which dont use ipsec? i'll elaborate a bit about it. sites that dont use ipsec only talk to the non ipsec sites and the ipsec sites only talk to the ipsec sites.

it might be that you are only looking for one or another feature, function or option now or better today,
being prepared and able to do all things is the hint that makes a hardware ready to do all, or let it running
longer as expected, this is my point of view.

If you will be able to get your hands on the Intel Core i7 and the Intel Xeon E3-1220v3 than do it and
go with this both CPUs each on one site. They have their own charm and they are really strong and
right powered. So it might be nothing wrong with this suggestion from me, they both are strong
with enough cores and with AES-NI also ready to run a long time.

thanks a lot :)

even for the sites which dont use ipsec? i'll elaborate a bit about it. sites that dont use ipsec only talk to the non ipsec sites and the ipsec sites only talk to the ipsec sites.

it might be that you are only looking for one or another feature, function or option now or better today,
being prepared and able to do all things is the hint that makes a hardware ready to do all, or let it running
longer as expected, this is my point of view.

If you will be able to get your hands on the Intel Core i7 and the Intel Xeon E3-1220v3 than do it and
go with this both CPUs each on one site. They have their own charm and they are really strong and
right powered. So it might be nothing wrong with this suggestion from me, they both are strong
with enough cores and with AES-NI also ready to run a long time.

Than go with the E3-1230 and 8 GB and a SSD this would be all enough to run a real pfSense based UTM
device that will fitting all needs and reach your goals.

even for the sites which dont use ipsec? i'll elaborate a bit about it. sites that dont use ipsec only talk to the non ipsec sites and the ipsec sites only talk to the ipsec sites.

1. No IPSEC. which would be the best

Core i7 or Xeon E5 5500 I would assume.

yes that is understood :)
@BlueKobold:

Surely the Core i7 and then the C2758 with AES-NI, but the E5-5500 Series is not a real
CPU its only commenting a or naming a series of CPUs, it would be better to know if this would be something
likes perhaps the E5-5570 CPU or to come closer to that point. Because the E5-5570 with 3,9GHz is not
coming with AES-NI support but would be also really a bomb for pfSense.

my mistake its not actually e5500 rather lets make it either e3 1220 v3 or 1230@BlueKobold:

Jetway N-2930 Board or PC
Intel C2758 Atom based rig or SG unit
Intel Xeon E3-12xxv3 rig with fast RAM
Intel Xeon D-1540 rig or XT-1540 unit

Might be all matching your needs and/or offering the best effort at this time.

And not suprisingly i mentioned e3 1220 or 1230 :)

@BlueKobold:

Your board with 8 GB RAM a SSD or mSATA and the Intel Core i7 3770 might be the best choice
in my eyes to get AES-NI, a high CPU frequency and the multiple Core together with HT technology.

THanks again for your responses. Why i wanted to go into detail was because of having 2 different sceneraios for us
1 having no ipsec and the other of course with ipsec
My initial thought was to get 2 different types of hardware for the different sceneraios maximizing performance in both the cases and maybe saving some bucks or saving some bucks from one setup and utilizing it in the other to get even better hardware for the other one

1. No IPSEC. which would be the best

Core i7 or Xeon E5 5500 I would assume.

2. IPSEC also comes in. Now which one will be the best?

Surely the Core i7 and then the C2758 with AES-NI, but the E5-5500 Series is not a real
CPU its only commenting a or naming a series of CPUs, it would be better to know if this would be something
likes perhaps the E5-5570 CPU or to come closer to that point. Because the E5-5570 with 3,9GHz is not
coming with AES-NI support but would be also really a bomb for pfSense.

Actually i am still confused regarding havving multi cores since i am not sure if the pf gets any benefit from it because if it doesnt then having the best clock speed will come out to be the winner

You can´t compare CPUs Core one against each other because I really would say that a actual
Intel Xeon E3-1286v3 is also a real bomb to handle each kind of traffic and that with unbelievable
low electric voltage using!

GHz is not all but much! An Intel Celeron dual core @3,2Ghz is not needing the AES-NI instruction
but strong enough to handle many IPSec connections and good to cool, and also only with two CPU cores!

Since pfSense will be going also more and more to support multicore code but not all things do and not
all packets are running in this mode on top, so it is more a mixed situation here in this way. The WAN mode
over PPPoE is only running at this time on only one CPU core, and there fore it might be the best to have a
really strong CPU as the Intel Xeon comes with and a high CPU frequency that will be a really goal an this time.

But you are right, pfSense might not be forever running like this and is tending more and more to use CPU
multi cores, the code I mean, and there for or also future proof it would be the best to get some from all
here in this game, 4 CPU Cores, CPU frequency starting at 3,0GHz or something around this and support
of the AES-NI together with much and fast RAM you will be on the top of all things and also able to realize
all the stuff pfSense is offering and this means not only the common options and features.

Perhaps it might be a real point to think about all and sell all things there and fiddle together a
own variant of a pfSense box or what is also a really good choice at this days for many pfSense
customers, to go with a SG-xxx unit from the pfSense store with support and a pre-installed and
tuned pfSense version, not cheap but supporting the project and mostly fucking fast for all at home.
They where putting together the best things from both sides, the 3 miniPCIe slots from the APU and the
C2x58 SoC from the intel Atom series.

Jetway N-2930 Board or PC
Intel C2758 Atom based rig or SG unit
Intel Xeon E3-12xxv3 rig with fast RAM
Intel Xeon D-1540 rig or XT-1540 unit

Might be all matching your needs and/or offering the best effort at this time.

Your board with 8 GB RAM a SSD or mSATA and the Intel Core i7 3770 might be the best choice
in my eyes to get AES-NI, a high CPU frequency and the multiple Core together with HT technology.

The Core i7 3770 might be the fastest one with @3,9GHz on 4 Cores and AES-NI support.
The C2758 would be the more balanced and strongest CPU.
The E5 5500 would be also strong but without AES-NI.

Thanks for your reply :)
lets consider 2 sceneraios
1. No IPSEC. which would be the best
2. IPSEC also comes in. Now which one will be the best?

Actually i am still confused regarding havving multi cores since i am not sure if the pf gets any benefit from it because if it doesnt then having the best clock speed will come out to be the winner