@Dmitry There’s so much great info in this thread - hopefully it can be added to the Vyos wiki so that future users don’t have to search the forum to find it?
I certainly learnt a bit, I wasn’t aware about the ntuple feature.
The PC Engine APU2 is an SBC with an AMD SoC running at a max of 1 Ghz - 12 watts. They run Intel NICs but it wasn’t a great surprise the thing needed some tuning to get full 1gb/s speed out of it.
I am looking at getting a Protectli box, but believe this is “just” a rebadged qotom machine.
Feel free to ping me if you have any recommendations for a good low power, silent box. Ideally I would want something that can take a 10gb/s sfp module as that is what comes into my apartment…
Intel NIC offloading may not be a good idea on a router, or so I have read somewhere.
Ring buffers - yes, rx 256 is too small resulting in lots of FIFO errors and dropped packets, rx 4096 works better.
Looking at this thread as I’m trying to get close to 1 Gb/s throughput on APU4 as BGP routers for small local ISP I’m running here. Unfortunately the APU4 has i211 NICs with only 2 queues. I’ve recently had a ~200k pps incoming DDoS which maxed out 2 of 4 CPU cores, looking to improve this - or do I really need to get faster (but more power-hungry) server boards to work well for this use?
I just need pure routing, no NAT etc. I wish there was an easy to setup router distro with something faster like DPDK but it seems it’s not there yet.
I’ve been struggling with a big performance regression when updating from 1.2 to 1.3.
With the mitigations off, could you please share your output for: grep . /sys/devices/system/cpu/vulnerabilities/*
I would like to compare it with my device to understand if the mitigations are actually off.
Hi there, I no longer have vyos running on my apu, I moved to a protectli device running esxi so I could consolidate a bunch of stuff.
I will resurrect the unit this week, validate it’s doing 1gb and share my config. I do think getting it to 1gbs is absolutely at it’s peak and it’s not a great surprise to see it fluctuate due to this.
Well, in my case with Vyos 1.2 I could do 1Gbit/s easily, with having 2 cores at around 90% usage and the other 2 at around 50%.
Now with Vyos 1.3, it’s maxing out at 700Mbit/s and all cores maxed out.
It’s almost a 50% regression, which doesn’t make sense from a version upgrade.
Fast forward a year or two later, and it was time to go for 10 Gbps interfaces. Also, the APU has some stability issues under high load - I’ve seen unexplained random reboots. So it will have to find some other light use (one with a small hardware hack works as a GPS synced NTP server, with very good accuracy of hardware timestamping by the Intel NIC), and my new router platform of choice are Supermicro X9 series boards with Xeon E3-1220v2 CPUs and Chelsio T440-CR (quad SFP+) PCIe cards. It seems a reasonable compromise between electricity costs, hardware costs and performance. The hardware is about 10 years old (needs BIOS upgrade to fix a year 2021 bug), but routing about 1 Gbps of traffic over two 10 Gb interfaces is hardly visible as any CPU load (about 2-3%).