documentation:faq
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
documentation:faq [2020/01/11 00:18] – [What's about the routing performance ?] olivier | documentation:faq [2022/07/11 11:59] (current) – [What's about OpenVPN performance ?] olivier | ||
---|---|---|---|
Line 12: | Line 12: | ||
{{https:// | {{https:// | ||
* 4 cores Atom with with multi-queue aware NIC is the minimum for a line-rate gigabit router (1.48Mpps of smallest packet size). | * 4 cores Atom with with multi-queue aware NIC is the minimum for a line-rate gigabit router (1.48Mpps of smallest packet size). | ||
- | * 8 core Xeon is the minimum for a 10Gigabit Full-Duplex (10Gbps receiving + 10Gbps transmitting = 20Gbps) with IMIX packet size distribution | + | * 8 core Atom not enough for the minimum for a 10Gigabit Full-Duplex (10Gbps receiving + 10Gbps transmitting = 20Gbps) with IMIX packet size distribution |
- | * 12 core Xeon is needed | + | * 8 core Xeon is enough |
===== What's about the firewall performance ? ===== | ===== What's about the firewall performance ? ===== | ||
+ | |||
+ | ==== 10Gb/s hardware ==== | ||
+ | |||
+ | {{https:// | ||
+ | |||
+ | ==== 40Gb/s hardware ===== | ||
A server designed to support 40Gb/s of bidirectional traffic could almost support IPFW in stateless mode but not pf neither ipf: | A server designed to support 40Gb/s of bidirectional traffic could almost support IPFW in stateless mode but not pf neither ipf: | ||
- | {{https:// | + | {{https:// |
===== What's about IPSec performance ? ===== | ===== What's about IPSec performance ? ===== | ||
It depends of your hardware and crypto algorithms used: | It depends of your hardware and crypto algorithms used: | ||
- | {{documentation:bench.ipsec.png|IPSec performance on multiple servers with FreeBSD 11.0}} | + | {{https://raw.githubusercontent.com/ |
- | ===== What's about OpenVPN | + | ===== What's about different VPN performance ? ===== |
- | It depends of your hardware and crypto algorithms used, but a userland software it will be almost half lower than IPSec: | + | {{https://raw.githubusercontent.com/ |
- | {{documentation:bench.openvpn.png|OpenVPN performance on multiple servers with FreeBSD 11.0}} | + | |
===== Can I install BSDRP on a MIPS or ARM device (RouterStation, | ===== Can I install BSDRP on a MIPS or ARM device (RouterStation, | ||
documentation/faq.1578698281.txt.gz · Last modified: 2020/01/11 00:18 by olivier