34 ms·

So what's the realistic throughput for an APU2 in a firewall configuration? (one port for LAN, one for WAN, forwarding traffic, no firewall rules)

INTPenis 10y ago
That's a very interesting figure because with my APU(1) I also can only reach about 560-700Mbit/s (70+MB/s) on bandwidth tests. Even though I'm supposed to have 1Gb with my ISP. I always thought my ISP had poor equipment but it could be the APU. Edit: And this is with a few rules, for home use. Edit2: eh, my comment was actually for the other poster that had measured 70MB/s. Sorry to confuse you.
keeperofdakeys 10y ago
In my tests I was getting around 70MB/s routing with a few dozen firewall rules. However I'm not sure if this was a limit of the APU2, or the devices I was using to generate the traffic. It also has accelerated crypto, so ipsec/openvpn shouldn't be much slower than routing.
- aomix 10y ago
  This summer I had a router running OpenBSD on the older apu1d and was seeing nearly 700mbps on iperf with a basic rule set. But I don't know how iperf relates to real world performance.
  - dom0 10y ago
    iperf has been, at least for me, a good benchmark for how fast file transfer might be, if everything goes well. Usually they are a bit [say, NFS] (or much [say, NFS on Windows]) slower.
- seanp2k2 10y ago
  I was looking for something low power to run privoxy, probably on pfsense, and ended up doing the kickstarter for https://www.kickstarter.com/projects/874883570/marvell-espressobin-board https://www.kickstarter.com/projects/874883570/marvell-espre... counting on ARM support for pfsense very soon.
  - aseipp 10y ago
    Looks like that thing is actually using an AArch64 core, looks neat. Not sure how well pfSense would work on 64bit ARM, but Netgate is releasing this thing with pfSense support soon as well, in case you haven't seen it: http://store.netgate.com/SG-1000.aspx http://store.netgate.com/SG-1000.aspx It's pricier, but it does support pfSense directly when you buy one, which I do think is nice.

INTPenis 10y ago

That's a very interesting figure because with my APU(1) I also can only reach about 560-700Mbit/s (70+MB/s) on bandwidth tests. Even though I'm supposed to have 1Gb with my ISP. I always thought my ISP had poor equipment but it could be the APU. Edit: And this is with a few rules, for home use. Edit2: eh, my comment was actually for the other poster that had measured 70MB/s. Sorry to confuse you.

keeperofdakeys 10y ago

In my tests I was getting around 70MB/s routing with a few dozen firewall rules. However I'm not sure if this was a limit of the APU2, or the devices I was using to generate the traffic. It also has accelerated crypto, so ipsec/openvpn shouldn't be much slower than routing.

aomix 10y ago
This summer I had a router running OpenBSD on the older apu1d and was seeing nearly 700mbps on iperf with a basic rule set. But I don't know how iperf relates to real world performance.
- dom0 10y ago
  iperf has been, at least for me, a good benchmark for how fast file transfer might be, if everything goes well. Usually they are a bit [say, NFS] (or much [say, NFS on Windows]) slower.
seanp2k2 10y ago
I was looking for something low power to run privoxy, probably on pfsense, and ended up doing the kickstarter for https://www.kickstarter.com/projects/874883570/marvell-espressobin-board https://www.kickstarter.com/projects/874883570/marvell-espre... counting on ARM support for pfsense very soon.
- aseipp 10y ago
  Looks like that thing is actually using an AArch64 core, looks neat. Not sure how well pfSense would work on 64bit ARM, but Netgate is releasing this thing with pfSense support soon as well, in case you haven't seen it: http://store.netgate.com/SG-1000.aspx http://store.netgate.com/SG-1000.aspx It's pricier, but it does support pfSense directly when you buy one, which I do think is nice.