Hacker News Reader

Comment by chrissnell | Hacker News Reader

So what's the realistic throughput for an APU2 in a firewall configuration? (one port for LAN, one for WAN, forwarding traffic, no firewall rules)

View on HN

In my tests I was getting around 70MB/s routing with a few dozen firewall rules. However I'm not sure if this was a limit of the APU2, or the devices I was using to generate the traffic.

It also has accelerated crypto, so ipsec/openvpn shouldn't be much slower than routing.

This summer I had a router running OpenBSD on the older apu1d and was seeing nearly 700mbps on iperf with a basic rule set. But I don't know how iperf relates to real world performance.

iperf has been, at least for me, a good benchmark for how fast file transfer might be, if everything goes well. Usually they are a bit [say, NFS] (or much [say, NFS on Windows]) slower.

I was looking for something low power to run privoxy, probably on pfsense, and ended up doing the kickstarter for https://www.kickstarter.com/projects/874883570/marvell-espre... counting on ARM support for pfsense very soon.

Looks like that thing is actually using an AArch64 core, looks neat. Not sure how well pfSense would work on 64bit ARM, but Netgate is releasing this thing with pfSense support soon as well, in case you haven't seen it: http://store.netgate.com/SG-1000.aspx

It's pricier, but it does support pfSense directly when you buy one, which I do think is nice.

That's a very interesting figure because with my APU(1) I also can only reach about 560-700Mbit/s (70+MB/s) on bandwidth tests. Even though I'm supposed to have 1Gb with my ISP.

I always thought my ISP had poor equipment but it could be the APU.

Edit: And this is with a few rules, for home use.

Edit2: eh, my comment was actually for the other poster that had measured 70MB/s. Sorry to confuse you.

Reply on news.ycombinator.com