I don't have the APU2C4, I have the APU1C4
and I can push 80Mb/sec of IPSec on it, way more obviously when I don't
do the IPSec.
My setup use ikedv2 from Rek@
When I reach the 80Mb/sec, well it reach the full CPU utilization.
When I do NAT only the CPU cores ( I have only 2 on that APU1) are use
only at 45% each for 150Mb/sec real traffic.
I wish I could test faster, but my line for now is 150Mb upgrading to
300Mb/sec soon.
If I do not do nat but use only fix IP's. it's even lower.
And my PF rules have 37 active lines. Well my config is bigger
obviously, but see the rules output for exact feedback.
It run routing, pf, IKEDv2, NAT, unbound, dhcpd, ntpd, smtpd just for
the local feedback, NOT for all my emails. I have a different server for
that.
# pfctl -sr | wc -l
37
I am upgrading it for the APU2c4 because if the AES-NI instruction set
on the CPU to improve my traffic under IKED, NOT because it is not
capable. I just want more traffic under encryption and the new CPU will
improve that.
But this one already can saturate the line I have already without IKED
traffic, so I can't imagine that it woudln't do what you want assuming
you are not running a fortune 500 company obviously.
here is without IKED:
http://www.speedtest.net/my-result/5253974103
And if I push it via tcpbench OVER IKED, instead of normal traffic (
from a server behind that APU1c4 that is not that box obviously and that
need routing and all), it gets a bit lower, but here is the output
anyway on average with the rest of the traffic running now. I stream
Spottily and have a video running and about 9 ssh connection at the
moment doing my work, and a few more stuff as well as my kid playing
games League of Legends, etc.
Conn: 1 Mbps: 55.166 Peak Mbps: 58.288 Avg Mbps: 55.166
As you can see, plenty of capacity and the APU2C4 I am sure beat this
hands down!
It has 4 cores oppose to two and the encryption set on the CPU.
Hope this help you.
Daniel
On 4/15/16 3:06 PM, Heine Lysemose wrote:
> Hi
>
> Can you give some real world through put? How much can you push through it
> from a NAT’et device? And what is the device stats when doing so?
>
> Best,
> Lysemise
>
>
>
> From: Christian Weisgerber
> Sent: 15. april 2016 18:19
> To: [email protected]
> Subject: Quick APU2 review
>
> I bought a PC Engines APU2 this week and thought I'd write up my
> impressions.
>
> TL;DR: Recommended.
>
> The obvious point of reference is the Soekris net6501. Now, that
> comparison isn't really fair since the net6501 is several years old
> and the APU2 is a new design. Then again, Soekris canceled their
> successor model (after stringing along potential customers for a
> year), so they're without a competitive product now. Tough for them.
>
> http://pcengines.ch/apu2c4.htm
> https://soekris.com/products/net6501-1.html
>
> Here's what the APU2 lacks: It has only three Ethernet ports instead
> of four, no front-side Ethernet LEDs, no PCI-Express expansion slot,
> no LOM. On the plus side, it has two USB 3.0 ports instead of a
> single USB 2.0 one.
>
> Performance: Single-core speed of the APU2 seems to be comparable
> to the net6501-70 (the fast model), but the APU2 has four cores
> instead of two and it has AES-NI, which provides a big boost for
> many crypto applications. A "make -j4 build" took exactly 120
> minutes.
>
> Heat: The APUs have an innovative design where the CPU heat sink
> is coupled to the case. Since this is typically assembled by the
> customer, a lot of attention is drawn to it and people obsess over
> the CPU temperature. It's a nonissue. Case temperature is about
> the same as for the net6501, where people are far less concerned,
> even a "make -j4 build" didn't raise the CPU temperature much (57C
> to 64.5C), and the design ensures good heat flow. Ask me again in
> six months how it did in a 33C summer environment, but I expect no
> problems whatsoever.
>
> The firmware is still being worked on; it's cobbled together from
> coreboot, a MemTest86 module (takes about 1h45 for one pass on the
> apu2c4), and iPXE. It works. I've booted via PXE, from an external
> USB key, and from mSATA.
>
> Miscellaneous: The case is really compact. The order of the Ethernet
> ports is reversed when compared to the Soekris and not marked on
> the case.
>
> And yes, the APU2 is fully supported by OpenBSD 5.9.
>
> Overall, I like it a lot. Compared to the net6501, the APU2 is
> much cheaper and more powerful. Compared to Intel Rangeley devices,
> it is readily available in small quantities (like, one) and, to
> pick the one that you can easily buy, again much cheaper than the
> RCC-VE 2440.
>
> My APU2 is serving as my home gateway now, replacing a net6501.
> It feels good to be running an AMD CPU again. :-)
>
>
> PS: I bought mine from NRG Systems GmbH, Augsburg, Germany, who
> sell convenient board/case/PSU/SSD kits. Board and case were
> already assembled.
> --
> Christian "naddy" Weisgerber [email protected]
