User Tools

Site Tools


documentation:faq

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
documentation:faq [2020/01/11 00:18] – [What's about the routing performance ?] olivierdocumentation:faq [2022/07/11 11:59] (current) – [What's about OpenVPN performance ?] olivier
Line 12: Line 12:
 {{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/hardware.png}} {{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/hardware.png}}
   * 4 cores Atom with with multi-queue aware NIC is the minimum for a line-rate gigabit router (1.48Mpps of smallest packet size).   * 4 cores Atom with with multi-queue aware NIC is the minimum for a line-rate gigabit router (1.48Mpps of smallest packet size).
-  * 8 core Xeon is the minimum for a 10Gigabit Full-Duplex (10Gbps receiving + 10Gbps transmitting = 20Gbps) with IMIX packet size distribution +  * 8 core Atom not enough for the minimum for a 10Gigabit Full-Duplex (10Gbps receiving + 10Gbps transmitting = 20Gbps) with IMIX packet size distribution 
-  * 12 core Xeon is needed for a 10Gb line-rate router (14.8Mpps) +  * core Xeon is enough for a 10Gb line-rate router (14.8Mpps) 
  
 ===== What's about the firewall performance ? ===== ===== What's about the firewall performance ? =====
 +
 +==== 10Gb/s hardware ====
 +
 +{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/10G/hardware.png}}
 +
 +==== 40Gb/s hardware =====
  
 A server designed to support 40Gb/s of bidirectional traffic could almost support IPFW in stateless mode but not pf neither ipf: A server designed to support 40Gb/s of bidirectional traffic could almost support IPFW in stateless mode but not pf neither ipf:
-{{https://raw.githubusercontent.com/ocochard/netbenches/master/Xeon_E5-2697Av4_16Cores-Mellanox_ConnectX-4/firewalls/results/fbsd12-stable.r354440.BSDRP.1.96/graph.png}}+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/40G/hardware.png}}
 ===== What's about IPSec performance ? ===== ===== What's about IPSec performance ? =====
  
 It depends of your hardware and crypto algorithms used: It depends of your hardware and crypto algorithms used:
-{{documentation:bench.ipsec.png|IPSec performance on multiple servers with FreeBSD 11.0}}+{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/ipsec.png}}
  
-===== What's about OpenVPN performance ? =====+===== What's about different VPN performance ? =====
  
-It depends of your hardware and crypto algorithms used, but a userland software it will be almost half lower than IPSec: +{{https://raw.githubusercontent.com/ocochard/netbenches/master/synthesis/VPNs-Atom_C2758.png}}
-{{documentation:bench.openvpn.png|OpenVPN performance on multiple servers with FreeBSD 11.0}}+
 ===== Can I install BSDRP on a MIPS or ARM device (RouterStation, D-Link, etc..) ? ===== ===== Can I install BSDRP on a MIPS or ARM device (RouterStation, D-Link, etc..) ? =====
  
documentation/faq.1578698281.txt.gz · Last modified: 2020/01/11 00:18 by olivier

Except where otherwise noted, content on this wiki is licensed under the following license: BSD 2-Clause
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki