Netgate SG-1000 microFirewall

Author Topic: PC Engines apu2 experiences  (Read 44312 times)

0 Members and 1 Guest are viewing this topic.

Offline kevindd992002

  • Sr. Member
  • ****
  • Posts: 409
  • Karma: +5/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #30 on: August 14, 2016, 12:34:48 am »
Are you guys using a full install or a nanobsd install on an msata 16gb ssd on an apu2c4?

Offline Stewart

  • Full Member
  • ***
  • Posts: 266
  • Karma: +16/-2
    • View Profile
Re: PC Engines apu2 experiences
« Reply #31 on: August 16, 2016, 11:18:56 am »
I'm running a full install.

Offline kevindd992002

  • Sr. Member
  • ****
  • Posts: 409
  • Karma: +5/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #32 on: August 16, 2016, 11:32:17 am »
Without any modifications like using ramdisks for /tmp and /var? Fulll install as is?

Offline Stewart

  • Full Member
  • ***
  • Posts: 266
  • Karma: +16/-2
    • View Profile
Re: PC Engines apu2 experiences
« Reply #33 on: August 16, 2016, 11:35:47 am »
Yes.  Using an msata ssd.

Offline mikeboss

  • Newbie
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #34 on: August 16, 2016, 06:40:32 pm »

Second, the APU2C4 only has about 73% of the performance of the APU1D using a single core and no hardware acceleration.


I saw similar results, back when I got my first APPU2. it seemed to be odd but then I re-ran the benchmark a few times and I always got more or less the same score each time...

APU1 https://browser.primatelabs.com/geekbench3/4636493
APU2 https://browser.primatelabs.com/geekbench3/4635680

regards,
michael

Offline kevindd992002

  • Sr. Member
  • ****
  • Posts: 409
  • Karma: +5/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #35 on: August 17, 2016, 12:34:35 am »
Are the APU2 developers already aware of this? This issue seems to be a major one that needs addressing, right?

Offline Qinn

  • Full Member
  • ***
  • Posts: 137
  • Karma: +5/-1
    • View Profile
Re: PC Engines apu2 experiences
« Reply #36 on: August 19, 2016, 08:03:54 am »
I read there is a module for using the 3 front LEDs on the apu2 boards (http://pcengines.ch/howto.htm#gpio), has anyone using pfSense experience with this?

Thanks in advance,

Cheers Qinn

Offline maglub

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #37 on: September 06, 2016, 01:45:02 pm »
Hi,

I just set up two APU2C4 boxes with pfSense 2.3.2. After a bit of fiddling with the USB stick for TinyCore, I managed to get it installed. On a 1Gbit connection, I had >800Mbit down and up through the firewall. No tuning what so ever.



I am using pfSense-CE-2.3.2-RELEASE-4g-amd64-nanobsd.img.gz
« Last Edit: September 06, 2016, 02:21:21 pm by maglub »

Offline j4k3

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #38 on: November 21, 2016, 12:38:34 pm »
Hey Guys, I wish I was getting maglub's performance out of the box.

I just received a APU2C4 in the mail and loaded pfSense-CE-memstick-serial-2.3.2-RELEASE-amd64 on it.

It manages to boot fine, and it's fully functional, the web interface moves much quicker and more fluid than the old ALIX2D3 it had replaced.

However when I run iperf on the LAN interface from another host, I'm only getting 300Mbps or so.

I found this thread about Intel I210AT nics and am attempting their suggestions:

https://redmine.pfsense.org/issues/1221

I see they're playing with the buffers and queues.

My question is this, if I edit loader.conf.local after looking at some of the options some options have "Quotes" around them, and others don't.

If I directly edit loader.conf.local when I specify variables in there, must they use " for the value? Or will just the value suffice?

hw.igb.num_queues="4" or hw.igb.num_queues=4 ?

Thanks

Offline cwagz

  • Full Member
  • ***
  • Posts: 118
  • Karma: +5/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #39 on: November 21, 2016, 03:38:31 pm »
I always use the quotes. I have not tried it without.

Offline j4k3

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #40 on: November 21, 2016, 07:49:27 pm »
Thanks for the insight, I managed to finally get close to 1Gbps on the lan interface.

I had to uncheck Disable hardware large receive offload, and Disable hardware TCP segmentation offload

Under System > Advanced > Networking

Based on what I've read so far I know this unit won't route more than 500 Mbps or so but I wanted to at least understand why, the nic was so hobbled right off the bat.


Offline cwagz

  • Full Member
  • ***
  • Posts: 118
  • Karma: +5/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #41 on: November 22, 2016, 10:24:23 am »
I am looking for some opinions on downsizing my current pfSense system with an APU2C4.

Currently I have:
Supermicro A1SRI-2558
8GB Ram
120GB SSD
Akasa Fanless Enclosure

There are 6 people in my house and 30 or so devices.  I am the only person that ever uses OpenVPN and it is usually from a mobile device on LTE so OpenVPN performance is probably not a huge deal.  I run Squid and Squidguard to proxy the internet for my kids.  Our internet connection is FiOS 150/150 Mbps.

It seems like I could build an apu2c4 and sell my current hardware.  I would probably have money left over and a smaller, slightly cooler running device for pfSense.

Do you guys see any potential performance issues or reasons why this is a bad idea?


Offline acascianelli

  • Jr. Member
  • **
  • Posts: 46
  • Karma: +1/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #42 on: November 22, 2016, 03:07:26 pm »
Does anyone know of a way to enable TRIM support on the SSD without having to boot of a recovery device?  Is there some sort of tunable where it can be enabled on the next reboot?
PC Engines APU2C4

Offline AndrewZ

  • Full Member
  • ***
  • Posts: 270
  • Karma: +20/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #43 on: November 22, 2016, 04:31:49 pm »

Offline lachendichatz

  • Newbie
  • *
  • Posts: 1
  • Karma: +1/-0
    • View Profile
Re: PC Engines apu2 experiences
« Reply #44 on: November 23, 2016, 03:52:03 am »
I switched from A1SRI-2758/8GB to apu2c4 as I need the 2758 for another server.

Running iperf3 between two pcs connected by the apu (pfsense 2.3.2) I get
600Mbit/s in one direction
615Mbit/s in the other one.
CPU runs at 25% load, e.g. one core is maxed out.

I probably see different speeds because I already imported my old firewall rules and have three rules on one nic and around 20 on the other one.

I observed the same speed & load when I installed debian and configured a few iptable rules.

Adding more clients (iperf -P 8 ) gives me:
940Mbit/s direction a
690Mbit/s direction b
880MBit/s duplex

Enabling (disabling unchecked) segmentation offload gives me
940Mbit/s direction a
695Mbit/s direction b
940Mbit/s duplex
CPU runs at 85%

Speedtest (init7) shows me 930down/940up. Initially I got 720/920 & 670/920 but that was because of my slow laptop (sigh). Restarting firefox gave me consistent speeds around 940.

So I can route a single TCP connection at 600Mbit/s per core. One could probably achieve higher speeds by tuning ISR related configs but as I can saturate my gigabit line with multiple connections I won't change settings.

I set igb_numqueue to 4 and mbuf to 1mio. Unknown if it had an effect.
Somebody suggested to set a rx/tx level (or queue? dont remeber) to 8k. That did not have an effect.
powerD disabled/enabled (hiadaptive) did not make a difference