Spend the money investing in good network cards and a external switch don’t try and switch from the router Pf Sense is not as streamlined as dedicated router or switch do-to the x86 architecture being built for PC’s not networking equipment. As-long a you are not planing on having the Pf Sense router do any FTP or website hosing you should be fine with a run of the mill 4-6 core with minimum 4 preferably 8 gb of ram and you will beat most ISRouters out there. You surprisingly don’t need as much power as people the assume you do just to route a network. The project which seems to have emerged from that work is called TNSR, rather than pfSense 3.0, but I’m not exactly sure what the status of it is or if it will ever be released in a community edition. There is simply no way to use today’s FreeBSD (or linux) in-kernel stacks for this type of load. This is “line rate” on a 10Gbps interface. We have a goal of being able to forward, with packet filtering at rates of at least 14.88Mpps. …the core of pfSense (pf, packet forwarding, shaping, link bonding/sharing, IPsec, etc) will be re-written using Intel’s DPDK.ĭPDK is a set of libraries and drivers for fast packet processing. The scalability limits are in the software. There are certainly faster CPUs out there these days, but I’m not confident that you will generally be able to saturate your connection with pfSense on any type of hardware. This is with MTU 1500, firewall enabled, and some pretty generic tuning.
What kind of CPU power do I need so I can enjoy the full speed?Īs a reference point, I can get about 3 Gb/s through pfSense for a single iperf3 (TCP) connection with a Xeon E5-2670 and Intel X520 NICs.
0 kommentar(er)
