On Fri, May 25, 2018 at 06:43:57PM +, Chris Jones wrote:
> I see that the Ubiquiti EdgeRouter 6P is supported under octeon port.
> Just wondering if anyone on the list is running OpenBSD 6.3 or current
> on the EdgeRouter 6P? I'm mainly interested in the performance of this
> unit as a home firewall but also interested in using it for other SMB
> applications.
Yes, I am running -current on a number of EdgeRouter 4 and 6P units.
They seem to work quite well. Some cursory routing between subnets
performance tested with iperf3 yields a max of around 450 Mbps
throughput. There is a new octcrypto(4) driver which should be
interesting and is on my list to test for ipsec.
http://man.openbsd.org/octcrypto
The caveat I have seen is that the USB 3.0 controller is more finicky
than I would like but it seems to be working better recently with
xhci(4) fixes that have gone in over the last few months. I have had
good success with Samsung Fit USB 3.0 flash drives but had some initial
problems with Samsung T3/T5 USB 3.0 SSD drives erroring out with USB
problems. I use OpenBSD through resflash for the most part but vanilla
OpenBSD works fine although the library reordering is fairly slow (a
minute or two I think) on boot.
> I would generally be running standard network services plus
> isakmpd/iked, ospfd, unbound. Also, is it fair to assume the PoE ports
> are just active by default?
I have not done any ipsec but the rest work fine. The PoE ports do not
work at all under OpenBSD. PoE is off unless enabled through the EdgeOS
interface and there is no way to do that through OpenBSD. I would
recommend the EdgeRouter 4 unless you need to run from 24V DC power or
need the extra ports but PoE is useless unfortunately. Also, unlike with
the shared copper/fiber ports on the EdgeRouter Pro and UniFi Security
Gateway Pro, the fiber port on the ER-4/ER-6P works fine as an
additional port (cnmac0 actually).
Bryan
