From owner-freebsd-stable@FreeBSD.ORG Wed Jun 18 08:20:14 2014 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id CA8FA8B5; Wed, 18 Jun 2014 08:20:14 +0000 (UTC) Received: from w21.org (ribe.w21.org [IPv6:2a01:238:4382:a300:3fe5:41ce:8574:8378]) by mx1.freebsd.org (Postfix) with ESMTP id 8AC1B253D; Wed, 18 Jun 2014 08:20:14 +0000 (UTC) Received: from [10.0.0.38] (p4FC09CC4.dip0.t-ipconnect.de [79.192.156.196]) by w21.org (Postfix) with ESMTPSA id 3B8DC1D04233; Wed, 18 Jun 2014 10:20:12 +0200 (CEST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\)) Subject: Re: Suggestions for low-power gigE firewall? From: Juergen Nickelsen In-Reply-To: Date: Wed, 18 Jun 2014 10:20:12 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <01E7F2B9-4334-442F-A748-2F0AEA2CF882@w21.org> References: <20140613121732.GA61092@behemoth> To: =?iso-8859-1?Q?Olivier_Cochard-Labb=E9?= X-Mailer: Apple Mail (2.1878.2) Cc: Artem Belevich , cnehren+freebsd-stable@pobox.com, FreeBSD stable X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jun 2014 08:20:14 -0000 On 2014-06-18, at 08:37, Olivier Cochard-Labb=E9 = wrote: > I confirm for a "home usage", the PC Engines APU can manage up to = 154Kpps > (about 437Mbs/s of IMIX) in routing and 114Kpps (about 324Mb/s of = IMIX) > with ipfw. > But... 154Kpps is far from the line-rate gigabit (1.48Mpps). Ubiquiti claims for their EdgeMAX routers to reach 1 Mpps with their = entry-level model (EdgeRouter LITE) and 2 Mpps with their bigger model = (EdgeRouter). They have maximum power requirements of 12 W and 40 W, = respectively. http://www.ubnt.com/edgemax I own the other entry-level device, with more ports and PoE (EdgeRouter = PEO), but don't yet have it in productive use (and would not able to = attest pps performance at that level anyway).=20 It seems to be quite capable a device, but the Web GUI doesn't cover the = more interesting parts of its functions, and the documentation of the = command-line UI, which is modeled strongly after Juniper's, seems to be = less than fully complete, to say the least. Might still work out if you are willing to find your way through it. I = am not yet fully convinced, but then I haven't found much time to do so = by now. Regards, Juergen.=