Re: [pfSense-discussion] Dell PowerEdge 750
On Tue, Oct 26, 2010 at 11:53:19PM -0400, Chris Buechler wrote: On Tue, Oct 26, 2010 at 3:59 PM, Eugen Leitl eu...@leitl.org wrote: It would probably still beat my 4x NIC 1.6 GHz dual-core Atoms (about Pentium 3 level of performance) You'd be surprised - a dual core Atom is considerably faster than a P3 at pushing packets, depending on NICs and the specific board. The I was assuming a single core of the Atom being about equivalent to a Pentium 3 at the same frequency. So two cores at 1.6 GHz would be about dual-socket Pentium 3 at about 1.2 GHz that Dell used to sell. better embedded firewall boards with Atoms can push around 500 Mbps. A That's still pretty good. I presume the Supermicro ones are the better ones. PE750 would be faster, though takes ~8-9 times as much power. The DPE 750 has a pretty low air flow, so I thought it wouldn't be a too big power guzzler. I see that http://unix.derkeiler.com/Mailing-Lists/FreeBSD/stable/2007-01/msg00176.html claims 88 Watt, which means it should be only 2-3x of the Supermicro Atoms. -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense-discussion] Dell PowerEdge 750
On Tue, Oct 26, 2010 at 11:53:19PM -0400, Chris Buechler wrote: On Tue, Oct 26, 2010 at 3:59 PM, Eugen Leitl eu...@leitl.org wrote: It would probably still beat my 4x NIC 1.6 GHz dual-core Atoms (about Pentium 3 level of performance) You'd be surprised - a dual core Atom is considerably faster than a P3 at pushing packets, depending on NICs and the specific board. The better embedded firewall boards with Atoms can push around 500 Mbps. A PE750 would be faster, though takes ~8-9 times as much power. As I managed to scrounge 4 GByte ECC DDR RAM, a dual-port Intel server NIC (PCI-X) and had a spare Crucial SSD (instead of a dead 80 GByte Maxtor that came with the machine orignally) I decided to give it a spin. Just installed 1.2.3 and upgraded to latest 2.0 beta snapshot. Wow, in comparison to my Atoms the thing feels like a speed demon. Boots like demented, the interface is really snappy, including RRD graphs, which has always been a bit lame -- maybe it's the switch to 2.0 from 1.3, though. I think I'm sold on it as my primary firewall, despite the hardware being ~5 years old. I will, however, keep an Atom box as the second node in a carp+pfsync failover. Did I already mention that I really, really like pfSense? ;) -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense-discussion] Dell PowerEdge 750
On Wed, Oct 27, 2010 at 11:14:47AM +0200, Eugen Leitl wrote: On Tue, Oct 26, 2010 at 11:53:19PM -0400, Chris Buechler wrote: On Tue, Oct 26, 2010 at 3:59 PM, Eugen Leitl eu...@leitl.org wrote: It would probably still beat my 4x NIC 1.6 GHz dual-core Atoms (about Pentium 3 level of performance) You'd be surprised - a dual core Atom is considerably faster than a P3 at pushing packets, depending on NICs and the specific board. The better embedded firewall boards with Atoms can push around 500 Mbps. A PE750 would be faster, though takes ~8-9 times as much power. As I managed to scrounge 4 GByte ECC DDR RAM, a dual-port Intel server NIC (PCI-X) and had a spare Crucial SSD (instead of a dead 80 GByte Maxtor that came with the machine orignally) I decided to give it a spin. Just installed 1.2.3 and upgraded to latest 2.0 beta snapshot. Wow, in comparison to my Atoms the thing feels like a speed demon. Boots like demented, the interface is really snappy, including RRD graphs, which has always been a bit lame -- maybe it's the switch to 2.0 from 1.3, though. I think I'm sold on it as my primary firewall, despite the hardware being ~5 years old. I will, however, keep an Atom box as the second node in a carp+pfsync failover. Did I already mention that I really, really like pfSense? ;) Just in case somebody has the same hardware, here's a dmesg dump Notice I had to put # cat /boot/loader.conf legal.intel_wpi.license_ack=1 legal.intel_ipw.license_ack=1 to get of legal warnings in the dmesg output. Copyright (c) 1992-2010 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 8.1-RELEASE-p1 #1: Tue Oct 26 15:11:49 EDT 2010 sullr...@freebsd_8.0_pfsense_2.0-snaps.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense.8 i386 Timecounter i8254 frequency 1193182 Hz quality 0 CPU: Intel(R) Pentium(R) 4 CPU 2.80GHz (2800.11-MHz 686-class CPU) Origin = GenuineIntel Id = 0xf34 Family = f Model = 3 Stepping = 4 Features=0xbfebfbffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT ,TM,PBE Features2=0x441dSSE3,DTES64,MON,DS_CPL,CNXT-ID,xTPR TSC: P-state invariant real memory = 4294967296 (4096 MB) avail memory = 4064215040 (3875 MB) ACPI APIC Table: DELL PE750 FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 1 package(s) x 1 core(s) x 2 HTT threads cpu0 (BSP): APIC ID: 0 cpu1 (AP/HT): APIC ID: 1 ioapic0: Changing APIC ID to 2 ioapic1: Changing APIC ID to 3 ioapic0 Version 2.0 irqs 0-23 on motherboard ioapic1 Version 2.0 irqs 24-47 on motherboard wlan: mac acl policy registered kbd1 at kbdmux0 cryptosoft0: software crypto on motherboard padlock0: No ACE support. acpi0: DELL PE750 on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) Timecounter ACPI-fast frequency 3579545 Hz quality 1000 acpi_timer0: 24-bit timer at 3.579545MHz port 0x808-0x80b on acpi0 cpu0: ACPI CPU on acpi0 cpu1: ACPI CPU on acpi0 pcib0: ACPI Host-PCI bridge port 0xcf8-0xcff on acpi0 pci0: ACPI PCI bus on pcib0 pcib1: ACPI PCI-PCI bridge at device 3.0 on pci0 pci1: ACPI PCI bus on pcib1 em0: Intel(R) PRO/1000 Legacy Network Connection 1.0.2 port 0xece0-0xecff mem 0xfe3e-0xfe3f irq 18 at device 1.0 on pci1 em0: [FILTER] pcib2: ACPI PCI-PCI bridge at device 28.0 on pci0 pci2: ACPI PCI bus on pcib2 em1: Intel(R) PRO/1000 Legacy Network Connection 1.0.2 port 0xdcc0-0xdcff mem 0xfe1e-0xfe1f irq 24 at device 1.0 on pci2 em1: [FILTER] em2: Intel(R) PRO/1000 Legacy Network Connection 1.0.2 port 0xdc80-0xdcbf mem 0xfe1c-0xfe1d irq 25 at device 1.1 on pci2 em2: [FILTER] uhci0: UHCI (generic) USB controller port 0xbce0-0xbcff irq 16 at device 29.0 on pci0 uhci0: [ITHREAD] uhci0: LegSup = 0x2f00 usbus0: UHCI (generic) USB controller on uhci0 uhci1: UHCI (generic) USB controller port 0xbcc0-0xbcdf irq 19 at device 29.1 on pci0 uhci1: [ITHREAD] uhci1: LegSup = 0x2f00 usbus1: UHCI (generic) USB controller on uhci1 pci0: base peripheral at device 29.4 (no driver attached) ehci0: Intel 6300ESB USB 2.0 controller mem 0xfe50-0xfe5003ff irq 23 at device 29.7 on pci0 ehci0: [ITHREAD] usbus2: EHCI version 1.0 usbus2: Intel 6300ESB USB 2.0 controller on ehci0 pcib3: ACPI PCI-PCI bridge at device 30.0 on pci0 pci3: ACPI PCI bus on pcib3 em3: Intel(R) PRO/1000 Legacy Network Connection 1.0.2 port 0xccc0-0xccff mem 0xfdee-0xfdef irq 21 at device 2.0 on pci3 em3: [FILTER] vgapci0: VGA-compatible display port 0xc800-0xc8ff mem 0xfc00-0xfcff,0xfdedf000-0xfded at device 14.0 on pci3 isab0: PCI-ISA bridge at device 31.0 on pci0 isa0: ISA bus on isab0 atapci0: Intel 6300ESB SATA150 controller port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfea0-0xfeaf at device 31.2 on pci0 ata0: ATA channel 0 on
RE: [pfSense-discussion] Dell PowerEdge 750
Just in case somebody has the same hardware, here's a dmesg dump Notice I had to put # cat /boot/loader.conf legal.intel_wpi.license_ack=1 legal.intel_ipw.license_ack=1 to get of legal warnings in the dmesg output. Thanks - I have about 300 of these sitting in stacks at the moment, and will likely use a few of them as firewalls at some point (once Ipv6 is implemented), so this is good info. Nathan - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense-discussion] Dell PowerEdge 750
On Wed, Oct 27, 2010 at 08:06:46PM +, Nathan Eisenberg wrote: Just in case somebody has the same hardware, here's a dmesg dump Notice I had to put # cat /boot/loader.conf legal.intel_wpi.license_ack=1 legal.intel_ipw.license_ack=1 to get of legal warnings in the dmesg output. Thanks - I have about 300 of these sitting in stacks at the moment, and will likely use a few of them as firewalls at some point (once Ipv6 is implemented), so this is good info. Hope you've got a few PCI-X dual-port Intel NICs as well, these can be hard to get nowadays, even used. -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense-discussion] Dell PowerEdge 750
Hope you've got a few PCI-X dual-port Intel NICs as well, these can be hard to get nowadays, even used. Up to my ears. - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense-discussion] Dell PowerEdge 750
Depends on what you mean by Gbit ? Gigabit @ imix packet distribution ? possibly. Gigabit @ high rate, small packet size, very doubtful. Greg -Original Message- From: Eugen Leitl [mailto:eu...@leitl.org] Sent: 26 October 2010 5:35 PM To: discussion@pfsense.com Subject: [pfSense-discussion] Dell PowerEdge 750 A working (dead hard drive) Dell PowerEdge 750 (1 GByte RAM, can probably double or quadruple that) with two Intel NICs onboard (have another dual-port server NIC that fits) fell into my hands. CPU is probably a 2.6 GHz Pentium 4. Is this useful material for a pfSense firewall that can handle ~GBit Ethernet, or is it not worth the power bill to operate? -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense-discussion] Dell PowerEdge 750
On Tue, Oct 26, 2010 at 06:13:20PM +0100, Greg Hennessy wrote: Depends on what you mean by Gbit ? Gigabit @ imix packet distribution ? possibly. It's a GBit link at a colo, pretty lightly loaded at the moment. Gigabit @ high rate, small packet size, very doubtful. It would probably still beat my 4x NIC 1.6 GHz dual-core Atoms (about Pentium 3 level of performance), albeit not by much, and not by pps/W. -- Eugen* Leitl a href=http://leitl.org;leitl/a http://leitl.org __ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE - To unsubscribe, e-mail: discussion-unsubscr...@pfsense.com For additional commands, e-mail: discussion-h...@pfsense.com Commercial support available - https://portal.pfsense.org
