pfSense Gold Subscription

Author Topic: Shuttle DS77  (Read 949 times)

0 Members and 1 Guest are viewing this topic.

Offline Quetschwalze

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Shuttle DS77
« on: June 07, 2017, 08:59:57 am »
While I was looking for a upgrade for my Zotac C323 I stumbled over the Shuttle DS77. It comes with different CPU Flavors (up to a Kaby Lake I7) and is always passively cooled, which is a must since my appliance is within hearing range :)

The Specs read nicely especially since it has two Intel NICs: http://www.shuttle.eu/products/slim/ds77u/specification/

Anyone have any experience with this box?

Offline iormangund

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +1/-0
    • View Profile
Re: Shuttle DS77
« Reply #1 on: August 06, 2017, 09:22:56 pm »
I have also been looking at getting a Shuttle DS77U for home firewall. (openvpn server and client use).

Have you pulled the trigger and gotten one yet or has anyone else had any experience with one?

On paper it looks like it should be perfect for pfsense.

Offline Nixus

  • Newbie
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: Shuttle DS77
« Reply #2 on: August 07, 2017, 12:20:13 pm »
I've been running the predecessors DS57U since 2015 and DS67U since last summer. Working great so far! I expect the DS77U to perform even better :)

My DS77U is assembled but currently gathering dust since it is configured with a nvme drive which requires pfSense 2.4 to boot. I was just about to start experimenting with the snapshots on it until I found a thread describing regressions relating to ACPI: https://forum.pfsense.org/index.php?topic=134755.0

Offline iormangund

  • Jr. Member
  • **
  • Posts: 26
  • Karma: +1/-0
    • View Profile
Re: Shuttle DS77
« Reply #3 on: August 07, 2017, 05:51:13 pm »
Good info about nvme and acpi, had no idea about those issues. You think disabling acpi until 2.4.1 solve the issue for now?

I would be grateful if you could test what sort of openvpn speeds you can get out of the DS77U, I am assuming you have the one with a 3865U chip?
Trying to work out if the jump to the 7100U one is worth it, I'm guessing it would be overkill for gigabit wan/lan routing and 100-200mbps openvpn.

Offline lansmurf

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: Shuttle DS77
« Reply #4 on: October 24, 2017, 09:03:19 am »
Hi,

Have the DS77U running with pfSense 2.4.0. Inside I have 8 gb Ram and a M.2 SSD card.
It works very well! I had to set M.2 card from SATA to PCI to get it to work in the bios.
Installation of pfSENSE via Memstick went well, beware that you might need a monitor with HDMI/Displayport (it lacks VGA)
The OPENVPN-connections are hardware crypto accelerated which give good speed results, approximately 90% of the normal ISP speed...
Temp is 30C with a CPU usage of around 5%

 

 
pfSense 2.4.0 on Shuttle DS77U

Offline Nixus

  • Newbie
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: Shuttle DS77
« Reply #5 on: November 10, 2017, 09:10:05 am »
Good info about nvme and acpi, had no idea about those issues. You think disabling acpi until 2.4.1 solve the issue for now?

I would be grateful if you could test what sort of openvpn speeds you can get out of the DS77U, I am assuming you have the one with a 3865U chip?
Trying to work out if the jump to the 7100U one is worth it, I'm guessing it would be overkill for gigabit wan/lan routing and 100-200mbps openvpn.

A little late but I finally got it up and running!

Here's some speedtests for you (DS77U, 3865U, 2.4.1-RELEASE):

Code: [Select]

CBC:

openssl speed aes-128-cbc
aes-128 cbc      68210.57k    75605.80k    77612.25k    78107.54k    78404.52k

openssl speed aes-128-cbc -multi 2
aes-128 cbc     131153.49k   147503.04k   148847.36k   152038.06k   153004.71k

openssl speed aes-256-cbc
aes-256 cbc      50314.94k    54149.78k    55158.53k    55540.82k    55658.96k

openssl speed aes-256-cbc -multi 2
aes-256 cbc      98275.47k   107082.79k   109251.16k   104750.76k   103885.48k

openssl speed aes-256-cbc -multi 4
aes-256 cbc      96934.95k   105304.92k   111095.98k   111068.73k   109262.33k


CBC with Envelope:

openssl speed -evp aes-128-cbc
aes-128-cbc     566274.07k   618790.02k   640560.46k   643536.55k   643189.42k

openssl speed -evp aes-128-cbc -multi 2
evp            1116641.03k  1155902.83k  1267443.54k  1246645.84k  1268792.15k

openssl speed -evp aes-256-cbc
aes-256-cbc     427213.53k   453748.46k   459032.66k   463006.52k   463769.80k

openssl speed -evp aes-256-cbc -multi 2
evp             839137.26k   853202.47k   885389.57k   898354.45k   868291.93k


GCM:

openssl speed -evp aes-128-gcm
aes-128-gcm     316490.79k   839964.26k  1388169.48k  1529748.39k  1576960.26k

openssl speed -evp aes-128-gcm -multi 2
evp             615091.66k  1648089.73k  2626153.47k  2969000.96k  3113052.84k

openssl speed -evp aes-256-gcm
aes-256-gcm     281719.70k   755495.23k  1160111.84k  1249082.88k  1280701.78k

openssl speed -evp aes-256-gcm -multi 2
evp             543052.01k  1460568.30k  2255877.57k  2429187.96k  2527988.39k

openssl speed -evp aes-256-gcm -multi 4
evp             547781.74k  1485326.95k  2348930.48k  2511385.61k  2543827.45k
« Last Edit: November 10, 2017, 09:16:48 am by Nixus »

Offline johnkeates

  • Sr. Member
  • ****
  • Posts: 578
  • Karma: +51/-1
    • View Profile
Re: Shuttle DS77
« Reply #6 on: November 10, 2017, 02:12:29 pm »
I have also used a DS77U and it does indeed work great. While there still are incompatibilities as mentioned, when you get it to work you're pretty much set for the next 10 years (unless you get heavy speed or load increase).

The only thing preventing me from getting more of them in the field was the fact that cheap china boxes are almost as reliable and half the price.

Before the DS77U I also used the slightly bigger socketed versions, those are the barebones with 2 extra bays in them. It was very useful for caching (used for local update and package distribution) in a mobile setup since it's still very small.

I do hope the embedded mobile versions of the Intel CPU + PCH combo's get a coreboot port, that would be very nice to have.

Offline pkaira

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Shuttle DS77
« Reply #7 on: November 21, 2017, 11:30:36 am »
I am trying to setup pfSense on DS77U and so far setup has gone without an hitch. However, I am having trouble setting it up as an headless unit. It works fine as long as a monitor is attached during startup (first 10-20 seconds), but if no monitor is attached than network doesn't come up. I have tried using display emulators but without any luck.

Has anyone succeeded in setting it up as a headless unit? I installed pfSense using memstick installer with VGA Console.

Offline johnkeates

  • Sr. Member
  • ****
  • Posts: 578
  • Karma: +51/-1
    • View Profile
Re: Shuttle DS77
« Reply #8 on: November 21, 2017, 11:35:14 am »
I am trying to setup pfSense on DS77U and so far setup has gone without an hitch. However, I am having trouble setting it up as an headless unit. It works fine as long as a monitor is attached during startup (first 10-20 seconds), but if no monitor is attached than network doesn't come up. I have tried using display emulators but without any luck.

Has anyone succeeded in setting it up as a headless unit? I installed pfSense using memstick installer with VGA Console.

I use serial

Offline pkaira

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Shuttle DS77
« Reply #9 on: November 21, 2017, 12:18:34 pm »
It looks like that pfSense 2.4.0 (or greater) doesn't like DS77U if serial ports are enabled on the device. It started working as soon as I disabled the Serial Ports.

I think the other way around is to use Serial Console like previous user said.