pfSense Gold Subscription

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - fabio.vigano

Pages: [1] 2 3 4 5
1
Italiano / pfSense ed i vantaggi di ZFS
« on: January 01, 2018, 03:10:55 pm »
Ciao a tutti,
se siete interessati a conoscere i vantaggi dell'utilizzo di ZFS su pfsense, vi consiglio quest'articolo:
http://www.pfsenseitaly.com/2018/01/pfsense-ed-i-vantaggi-di-zfs.html

Ciao Fabio

2
Italiano / Accesso all'interfaccia di pfsense tramite utenti RADIUS
« on: August 24, 2017, 11:10:55 am »
Ciao,
vi segnalo quest'articolo, spiega come configurare pfSense per sfruttare un server radius come server di autenticazione
http://www.pfsenseitaly.com/2017/08/login-su-pfsense-tramite-radius.html#more

Ciao Fabio

3
Italiano / Monitorare l'UPS con NUT
« on: August 18, 2017, 02:22:07 am »
Ciao,
vi segnalo un nuovo articolo su come far interagire UPS e pfsense per un corretto shutdown in caso di black-out
http://www.pfsenseitaly.com/2017/08/monitorare-lups-con-nut-da-pfsense.html

Ciao Fabio

4
General Questions / pfSense performance test
« on: July 28, 2017, 06:15:38 am »
Hi guys,
I have two complex questions:

1) I would like to know if pfsense (PF and OpenVPN) can properly use multi core processors
2) I would like to understand how to determine the maximum thrughput of my firewall (as packet filtering capacity and encryption performance)

About the question number 1 I see this page
https://doc.pfsense.org/index.php/Does_pfSense_support_SMP_(multi-processor_and/or_core)_systems
So the answer I think is YES, but searching on google I found conflicting information and also from my test i see conflicting information.

About the question number 2 in the past I used this two test:
A) Iperf loopback test
On the console I run iperf -s and in another console I run iperf -c 127.0.0.1 -P8 -w 128k -t30
The option -P use multi thread feauture, but i think is only for the iperf in client mode because only one core run on 100% and the other run on 20% - 30%. I think the core at 100% is running iperf server.
It is iperf or pf not to be able to use multi thread/core?
I also turned off pf (pfctl-d) and I did the test, in this test the thrughput was greater than 30% compared to that with pf turned on, but only a core was used at 100%
From my experience I can conclude that iperf loopback testing is not the best way to determine the maximum thrughput available from my hardware. What test can I do to get this information?


B) OpenVPN crypto test

On the console i run:
openvpn --genkey --secret /tmp/secret
time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc

Also in this test I see only one core running on 100%
I tried to run multiple instances simultaneously. In this way I used all the core at 100%.
From every instance / core I got the same performance, so can I use the multi core only with multiple instances of openvpn?


I did a comparison between different processors and I got the results you can see in the attached file
Analyzing the results, it seems that the processor clock frequency is much more relevant than the number of core
The result is paradoxical, the Intel Celeron G1620 2.7 GHz processor is similar and has the same thrughput of the Intel Xeon D-1528 1.9 GHz processor


From my experience I can conclude that iperf loopback testing is not the best way to determine the maximum thrughput available from my hardware.
Openvon is not able to exploit multi core processors and the best performances are only achieved by increasing the clock frequency or using AES-NI extensions.


What do you think?
What is the best way to measure the maximum thrughput of a firewall (as packet filtering capacity and encryption performance)?

Thanks
Fabio

5
Ciao,
se vi interessa configurare il client ACME per ottenere gratis certificati SSL validi, potete seguire questa guida

http://www.pfsenseitaly.com/2017/03/ottenere-gratuitamente-un-certificato.html#more


Ciao Fabio

6
Italiano / Misurare le performance di OpenVPN
« on: November 19, 2016, 04:48:00 pm »
Ciao a tutti,
se vi interessa scoprire come misurare le performance openvpn dei vostri pfsense, potete leggere quest'articolo
http://www.pfsenseitaly.com/2016/11/misurare-le-performance-di-openvpn-su.html#more

Ciao Fabio

7
Italiano / Abilitare il TRIM in pfSense
« on: September 28, 2016, 03:22:54 pm »
Ciao,
qualche mese fa su questo forum c'è stata una discussione sull'abilitazione del TRIM in pfSense.
Con l'avvento di pfSense 2.3 la vecchia procedura non funziona più.
Qui trovate la procedura funzionante sia sulle vecchie versioni che dalla 2.3 in avanti

http://www.pfsenseitaly.com/2016/09/abilitare-il-trim-in-pfsense.html#more


Ciao Fabio

8
Italiano / pfSense e connessioni 10 GbE
« on: August 31, 2016, 06:18:05 am »
Ciao a tutti,
se state pensando di attivare connessioni 10 GbE forse vi può interessare quest'articolo

http://www.pfsenseitaly.com/2016/08/pfsense-e-10-gbe.html

Ciao Fabio

9
Ciao a tutti,
è tempo di fondi PON e chi impiega pfsense nelle scuole troverà certamente utile quest'articolo  ;)

http://www.pfsenseitaly.com/2016/06/abilitare-safe-search-di-google.html

Per i più pigri allego anche il file già pronto con tutte le voci da caricare nel dns forwarding

Ciao Fabio

10
Italiano / Importare certificati SSL in pfSense
« on: May 17, 2016, 05:08:26 pm »
Ciao,
vi segnalo quest'articolo su come importare certificati SSL in pfSense

http://www.pfsenseitaly.com/2016/05/installare-un-certificato-ssl.html

Ciao Fabio

11
Italiano / Aggiornare dalla 2.3 BETA o RC
« on: April 12, 2016, 05:20:58 pm »
Ciao,
per chi si accinge ad aggiornare da una beta o rc alla versione stabile, consiglio quest'articolo

http://www.pfsenseitaly.com/2016/04/aggiornare-senza-farsi-male-parte-1.html

Fabio

12
Italiano / Rilasciata la versione 2.3 stabile
« on: April 12, 2016, 03:45:46 pm »
Ciao,
vi segnalo che la versione 2.3 è stata ufficialmente rilasciata
http://www.pfsenseitaly.com/2016/04/rilasciata-la-versione-23-di-pfsense.html

Fabio

13
Italiano / OpenVPN Server su pfSense 2.3
« on: March 19, 2016, 07:08:27 pm »
Ciao,
vi segnalo un nuovo articolo sulle VPN site to site con OpenVPN

http://www.pfsenseitaly.com/2016/03/openvpn-server-su-pfsense-23.html


Ciao Fabio

14
Italiano / pfSense 2.3: ci siamo quasi
« on: March 03, 2016, 03:56:17 pm »
Manca veramente poco, lo sviluppo volge al termine molto velocemente ed a breve avremo a disposizione una nuova release di pfSense

http://www.pfsenseitaly.com/2016/03/pfsense-23-si-puo-fare.html


Ciao Fabio

15
Italiano / pfSense 2.2.5
« on: November 06, 2015, 03:33:27 pm »
Ciao,
se qualcuno se lo fosse perso è uscita la nuova release 2.2.5
http://www.pfsenseitaly.com/2015/11/rilasciata-la-versione-225-di-pfsense.html

Ciao Fabio

Pages: [1] 2 3 4 5