RE: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread Adam Thompson
That brings up a good question: what sort of hardware *should* I be using to 
forward ~1Gbps of IP traffic between two NICs (or two VLANs, doesn't matter)?  
I'm currently pfSense under VMWare ESXi, on an 8-core Xeon 2.8GHz machine with 
24Gb of RAM and 4x1GbE bonded network(i.e. lots of spare overhead, it's not 
even fully utilized yet) and have noticed a few things:
1. passing all the VLAN tags through to pfSense and setting up VLAN interfaces 
there gives lower performance than configuring 4 x virtual networks in VMware 
and setting up 4 x virtual NICs in the VM.
2. routing between VLANs in VMware seems to provide significantly lower peak 
performance than using dedicated hardware: a dual P-III 1.0GHz running dual 
1GbE on a PCI-X card outperformed the VMware install by a factor of five.  I 
suspect some subtle interaction between my switch, VMware and VLANs.

The numbers: the dual-1GHz-PIII could sustain between 200-300Mbit/sec between 
the two 1Gb ports (untagged).  The VM can only sustain about 10-20Mbit/sec 
between the same two VLANs.

I haven't yet attempted to dedicate one port in VMware to each VLAN in order to 
completely remove tagging.

-Adam Thompson
 Chief Technical Architect, C3A Inc.
 athom...@c3a.ca
 (204) 272-9628 / fax: (204) 272-8291


> -Original Message-
> From: Chris Buechler [mailto:cbuech...@gmail.com]
> Sent: Wednesday, July 14, 2010 2:38 PM
> To: support@pfsense.com
> Subject: Re: [pfSense Support] Minimal configuration for pfSense.
> 
> On Wed, Jul 14, 2010 at 3:33 PM, Laurentiu STEFAN
>  wrote:
> > OKa. I have seen
> > I have 2 connextion 30-100mbps so I need no less than 1.0 GHz CPU
> >
> 
> Yeah that's reasonable, to ensure you aren't going to overload the
> system.
> 
> -
> To unsubscribe, e-mail: support-unsubscr...@pfsense.com For
> additional commands, e-mail: support-h...@pfsense.com
> 
> Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread Chris Buechler
On Wed, Jul 14, 2010 at 3:33 PM, Laurentiu STEFAN
 wrote:
> OKa. I have seen
> I have 2 connextion 30-100mbps so I need no less than 1.0 GHz CPU
>

Yeah that's reasonable, to ensure you aren't going to overload the system.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread Laurentiu STEFAN
OKa. I have seen
I have 2 connextion 30-100mbps so I need no less than 1.0 GHz CPU

2010/7/14 Jim Pingle 

> On 7/14/2010 3:17 PM, Laurentiu STEFAN wrote:
> > It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN
> > for pfSense (Mask, firewall & load balancing whith 10 PC behind)?
>
> That's not very much RAM. If it doesn't use any packages, and no VPNs,
> it might work. Barely.
>
> But it will probably waste more money in power costs in a year than a
> newer, more efficient (and faster) unit.
>
> Jim
>
> -
> To unsubscribe, e-mail: support-unsubscr...@pfsense.com
> For additional commands, e-mail: support-h...@pfsense.com
>
> Commercial support available - https://portal.pfsense.org
>
>


Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread Jim Pingle
On 7/14/2010 3:17 PM, Laurentiu STEFAN wrote:
> It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN
> for pfSense (Mask, firewall & load balancing whith 10 PC behind)?

That's not very much RAM. If it doesn't use any packages, and no VPNs,
it might work. Barely.

But it will probably waste more money in power costs in a year than a
newer, more efficient (and faster) unit.

Jim

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread David Burgess
On Wed, Jul 14, 2010 at 1:17 PM, Laurentiu STEFAN
 wrote:
> It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN for
> pfSense (Mask, firewall & load balancing whith 10 PC behind)?

That CPU should be good for ~15mbps throughput if you're not loading
it with vpn and such. You will have to double the RAM though. Have you
checked 
http://www.pfsense.org/index.php?option=com_content&task=view&id=45&Itemid=48
for minimum requirements? Also look at
http://www.pfsense.org/index.php?option=com_content&task=view&id=52&Itemid=49
for a better idea of how far your hardware will go.

db

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] Minimal configuration for pfSense.

2010-07-14 Thread Laurentiu STEFAN
It's OKa to use an IBM Pentium MMX 200MHZ, 64MB Ram, 3GB SCSI, 3X LAN for
pfSense (Mask, firewall & load balancing whith 10 PC behind)?