>From owner-misc+M157084=deraadt=cvs.openbsd....@openbsd.org Fri Apr 15 >13:39:59 2016 >Delivered-To: dera...@cvs.openbsd.org >DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=realconnect.com; h=subject >:to:references:from:message-id:date:mime-version:in-reply-to >:content-type:content-transfer-encoding; s=mail-key; bh=v6TAoSDi >qhR+xU4jzmiPMESBlnY=; b=YHdaKebjNunl691j7NzsWzplrmJmJYbGkqeGrslP >S6XoMsgDnVCEAE6Uj7/f3K7QPtUBMhtRliAGzg4RuY3gPJcAsBgJlaA3XiCOn17H >8Wg1h6JlguPdF/K/ov/7BFHEv/9vdWhCIOItGYs/vUaZ3vip3fHtyEUThpUq/scL Xvo= >Subject: Re: Quick APU2 review >To: misc@openbsd.org >References: <20160415161241.ga80...@lorvorc.mips.inka.de> ><57113bb9.858e1c0a.c6973.ffff9...@mx.google.com> >From: Daniel Ouellet <dan...@presscom.net> >Date: Fri, 15 Apr 2016 15:38:16 -0400 >User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) >Gecko/20100101 Thunderbird/38.7.2 >MIME-Version: 1.0 >In-Reply-To: <57113bb9.858e1c0a.c6973.ffff9...@mx.google.com> >Content-Type: text/plain; charset=utf-8 >Content-Transfer-Encoding: 8bit >List-Help: <mailto:majord...@openbsd.org?body=help> >List-ID: <misc.openbsd.org> >List-Owner: <mailto:owner-m...@openbsd.org> >List-Post: <mailto:misc@openbsd.org> >List-Subscribe: <mailto:majord...@openbsd.org?body=sub%20misc> >List-Unsubscribe: <mailto:majord...@openbsd.org?body=unsub%20misc> >X-Loop: misc@openbsd.org >Precedence: list >Sender: owner-m...@openbsd.org > >I don't have the APU2C4, I have the APU1C4 > >and I can push 80Mb/sec of IPSec on it, way more obviously when I don't >do the IPSec. > >My setup use ikedv2 from Rek@ > >When I reach the 80Mb/sec, well it reach the full CPU utilization. > >When I do NAT only the CPU cores ( I have only 2 on that APU1) are use >only at 45% each for 150Mb/sec real traffic. > >I wish I could test faster, but my line for now is 150Mb upgrading to >300Mb/sec soon. > >If I do not do nat but use only fix IP's. it's even lower. > >And my PF rules have 37 active lines. Well my config is bigger >obviously, but see the rules output for exact feedback. > >It run routing, pf, IKEDv2, NAT, unbound, dhcpd, ntpd, smtpd just for >the local feedback, NOT for all my emails. I have a different server for >that. > ># pfctl -sr | wc -l > 37 > >I am upgrading it for the APU2c4 because if the AES-NI instruction set >on the CPU to improve my traffic under IKED, NOT because it is not >capable. I just want more traffic under encryption and the new CPU will >improve that. > >But this one already can saturate the line I have already without IKED >traffic, so I can't imagine that it woudln't do what you want assuming >you are not running a fortune 500 company obviously. > >here is without IKED: > >http://www.speedtest.net/my-result/5253974103 > >And if I push it via tcpbench OVER IKED, instead of normal traffic ( >from a server behind that APU1c4 that is not that box obviously and that >need routing and all), it gets a bit lower, but here is the output >anyway on average with the rest of the traffic running now. I stream >Spottily and have a video running and about 9 ssh connection at the >moment doing my work, and a few more stuff as well as my kid playing >games League of Legends, etc. > >Conn: 1 Mbps: 55.166 Peak Mbps: 58.288 Avg Mbps: 55.166 > >As you can see, plenty of capacity and the APU2C4 I am sure beat this >hands down! > >It has 4 cores oppose to two and the encryption set on the CPU. > >Hope this help you. > >Daniel > > >On 4/15/16 3:06 PM, Heine Lysemose wrote: >> Hi >> >> Can you give some real world through put? How much can you push through it >> from a NATââ¬â¢et device? And what is the device stats when doing so? >> >> Best, >> Lysemise >> >> >> >> From: Christian Weisgerber >> Sent: 15. april 2016 18:19 >> To: misc@openbsd.org >> Subject: Quick APU2 review >> >> I bought a PC Engines APU2 this week and thought I'd write up my >> impressions. >> >> TL;DR: Recommended. >> >> The obvious point of reference is the Soekris net6501. Now, that >> comparison isn't really fair since the net6501 is several years old >> and the APU2 is a new design. Then again, Soekris canceled their >> successor model (after stringing along potential customers for a >> year), so they're without a competitive product now. Tough for them. >> >> http://pcengines.ch/apu2c4.htm >> https://soekris.com/products/net6501-1.html >> >> Here's what the APU2 lacks: It has only three Ethernet ports instead >> of four, no front-side Ethernet LEDs, no PCI-Express expansion slot, >> no LOM. On the plus side, it has two USB 3.0 ports instead of a >> single USB 2.0 one. >> >> Performance: Single-core speed of the APU2 seems to be comparable >> to the net6501-70 (the fast model), but the APU2 has four cores >> instead of two and it has AES-NI, which provides a big boost for >> many crypto applications. A "make -j4 build" took exactly 120 >> minutes. >> >> Heat: The APUs have an innovative design where the CPU heat sink >> is coupled to the case. Since this is typically assembled by the >> customer, a lot of attention is drawn to it and people obsess over >> the CPU temperature. It's a nonissue. Case temperature is about >> the same as for the net6501, where people are far less concerned, >> even a "make -j4 build" didn't raise the CPU temperature much (57C >> to 64.5C), and the design ensures good heat flow. Ask me again in >> six months how it did in a 33C summer environment, but I expect no >> problems whatsoever. >> >> The firmware is still being worked on; it's cobbled together from >> coreboot, a MemTest86 module (takes about 1h45 for one pass on the >> apu2c4), and iPXE. It works. I've booted via PXE, from an external >> USB key, and from mSATA. >> >> Miscellaneous: The case is really compact. The order of the Ethernet >> ports is reversed when compared to the Soekris and not marked on >> the case. >> >> And yes, the APU2 is fully supported by OpenBSD 5.9. >> >> Overall, I like it a lot. Compared to the net6501, the APU2 is >> much cheaper and more powerful. Compared to Intel Rangeley devices, >> it is readily available in small quantities (like, one) and, to >> pick the one that you can easily buy, again much cheaper than the >> RCC-VE 2440. >> >> My APU2 is serving as my home gateway now, replacing a net6501. >> It feels good to be running an AMD CPU again. :-) >> >> >> PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who >> sell convenient board/case/PSU/SSD kits. Board and case were >> already assembled. >> -- >> Christian "naddy" Weisgerber na...@mips.inka.de > > > I don't have the APU2C4, I have the APU1C4
That's nice. I don't have a ferrari, I have a rather basic truck. You are off topic.
