Differences

This shows you the differences between two versions of the page.

--- documentation:faq [2019/03/25 15:53] – external edit 127.0.0.1
+++ documentation:faq [2022/07/11 11:59] (current) – [What's about OpenVPN performance ?] olivier
@@ Line 9: / Line 9: @@
 ===== What's about the routing performance ? =====
-It depends of your hardware:
+It depends on your hardware:
-{{documentation:examples:bench.forwarding.and.firewalling.rate.on.multiple.servers.png|Forwarding and firewalling packet rate on multiple servers with FreeBSD (10-stable)}}
+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/hardware.png}}
   * 4 cores Atom with with multi-queue aware NIC is the minimum for a line-rate gigabit router (1.48Mpps of smallest packet size).
-  * 8 core Xeon is the minimum for a 10Gigabit Full-Duplex (10Gbps receiving + 10Gbps transmitting = 20Gbps) with IMIX packet size distribution
+  * 8 core Atom not enough for the minimum for a 10Gigabit Full-Duplex (10Gbps receiving + 10Gbps transmitting = 20Gbps) with IMIX packet size distribution
-  * 12 core Xeon is needed for a 10Gb line-rate router (14.8Mpps)
+  * 8 core Xeon is enough for a 10Gb line-rate router (14.8Mpps)
+===== What's about the firewall performance ? =====
+==== 10Gb/s hardware ====
+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/10G/hardware.png}}
+==== 40Gb/s hardware =====
+A server designed to support 40Gb/s of bidirectional traffic could almost support IPFW in stateless mode but not pf neither ipf:
+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/40G/hardware.png}}
 ===== What's about IPSec performance ? =====
 It depends of your hardware and crypto algorithms used:
-{{documentation:bench.ipsec.png|IPSec performance on multiple servers with FreeBSD 11.0}}
+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/ipsec.png}}
-===== What's about OpenVPN performance ? =====
+===== What's about different VPN performance ? =====
-It depends of your hardware and crypto algorithms used, but a userland software it will be almost half lower than IPSec:
+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/VPNs-Atom_C2758.png}}
-{{documentation:bench.openvpn.png|OpenVPN performance on multiple servers with FreeBSD 11.0}}
 ===== Can I install BSDRP on a MIPS or ARM device (RouterStation, D-Link, etc..) ? =====