ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Co-lo + 5 (or more) sites....connect 'em all

    Scheduled Pinned Locked Moved IT Discussion
    edgerouteredgerouter 4colocationit supportvpnzerotier
    82 Posts 7 Posters 7.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      I'd use VyOS before pfSense for this.

      FATeknollogeeF 1 Reply Last reply Reply Quote 2
      • FATeknollogeeF
        FATeknollogee @scottalanmiller
        last edited by

        @scottalanmiller said in Co-lo + 5 (or more) sites....connect 'em all:

        VyOS

        Ok, will check it out!

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @FATeknollogee
          last edited by

          @FATeknollogee said in Co-lo + 5 (or more) sites....connect 'em all:

          @scottalanmiller said in Co-lo + 5 (or more) sites....connect 'em all:

          VyOS

          Ok, will check it out!

          Linux based router OS. Built from the same original code that EdgeOS comes from.

          1 Reply Last reply Reply Quote 0
          • 1
            1337
            last edited by 1337

            @FATeknollogee
            I did a test. I get 840 Mbps IPsec between two servers running xcp-ng and one pfSense in each. 4 vCPU 2.5GHz Xeon E5.
            This was over 1GbE and with NAT, packet filtering, I/O overhead of Xen etc.

            I expected more but was too lazy to try on bare metal. But I would assume it's faster, also a newer CPU with higher clock frequencies would likely give it another boost.

            If you want a lot more speed you can add an accelerator card. Intel has their Quick Assist Technology and a card that can do up to 50 Gbps is priced around $650.

            FATeknollogeeF 2 Replies Last reply Reply Quote 1
            • FATeknollogeeF
              FATeknollogee @1337
              last edited by

              @Pete-S pfSense? What did you test with?

              DashrenderD JaredBuschJ 2 Replies Last reply Reply Quote 0
              • DashrenderD
                Dashrender @FATeknollogee
                last edited by

                @FATeknollogee said in Co-lo + 5 (or more) sites....connect 'em all:

                @Pete-S pfSense? What did you test with?

                I would guess from his wording - two xcp-ng hosts, each with a PFSense VM, directly connected to each other, this would take the ISP out of the equation and show max throughput for his given setup (4 vCPU, no RAM listed).

                1 1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @FATeknollogee
                  last edited by

                  @FATeknollogee said in Co-lo + 5 (or more) sites....connect 'em all:

                  @Pete-S pfSense? What did you test with?

                  iperf is the standard tool for this.

                  1 Reply Last reply Reply Quote 1
                  • 1
                    1337 @Dashrender
                    last edited by 1337

                    @Dashrender said in Co-lo + 5 (or more) sites....connect 'em all:

                    @FATeknollogee said in Co-lo + 5 (or more) sites....connect 'em all:

                    @Pete-S pfSense? What did you test with?

                    I would guess from his wording - two xcp-ng hosts, each with a PFSense VM, directly connected to each other, this would take the ISP out of the equation and show max throughput for his given setup (4 vCPU, no RAM listed).

                    Yes. And it was 2GB RAM.

                    @JaredBusch said in Co-lo + 5 (or more) sites....connect 'em all:

                    @FATeknollogee said in Co-lo + 5 (or more) sites....connect 'em all:

                    @Pete-S pfSense? What did you test with?

                    iperf is the standard tool for this.

                    Correct. iperf (v3.6) with a couple of parallel streams.

                    1 Reply Last reply Reply Quote 0
                    • FATeknollogeeF
                      FATeknollogee @1337
                      last edited by

                      @Pete-S said in Co-lo + 5 (or more) sites....connect 'em all:

                      @FATeknollogee
                      I did a test. I get 840 Mbps IPsec between two servers running xcp-ng and one pfSense in each. 4 vCPU 2.5GHz Xeon E5.
                      This was over 1GbE and with NAT, packet filtering, I/O overhead of Xen etc.

                      I expected more but was too lazy to try on bare metal. But I would assume it's faster, also a newer CPU with higher clock frequencies would likely give it another boost.

                      If you want a lot more speed you can add an accelerator card. Intel has their Quick Assist Technology and a card that can do up to 50 Gbps is priced around $650.

                      How much RAM?
                      Did you check CPU usage?

                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                      • scottalanmillerS
                        scottalanmiller @FATeknollogee
                        last edited by

                        @FATeknollogee said in Co-lo + 5 (or more) sites....connect 'em all:

                        @Pete-S said in Co-lo + 5 (or more) sites....connect 'em all:

                        @FATeknollogee
                        I did a test. I get 840 Mbps IPsec between two servers running xcp-ng and one pfSense in each. 4 vCPU 2.5GHz Xeon E5.
                        This was over 1GbE and with NAT, packet filtering, I/O overhead of Xen etc.

                        I expected more but was too lazy to try on bare metal. But I would assume it's faster, also a newer CPU with higher clock frequencies would likely give it another boost.

                        If you want a lot more speed you can add an accelerator card. Intel has their Quick Assist Technology and a card that can do up to 50 Gbps is priced around $650.

                        How much RAM?
                        Did you check CPU usage?

                        I think that he said 2GB.

                        1 Reply Last reply Reply Quote 0
                        • FATeknollogeeF
                          FATeknollogee
                          last edited by FATeknollogee

                          Update: this is what I ended up with.
                          Route based VPN using this guide as a template.

                          Master site: 1x ER 12 + 1x ER 4
                          Sites A, B, C & D :1x ER4 each location
                          Colo: 1x ER4 & 1x pfSense (SM x10SDV-TLN4F+)

                          1 Reply Last reply Reply Quote 1
                          • 1
                          • 2
                          • 3
                          • 4
                          • 5
                          • 5 / 5
                          • First post
                            Last post