Member Login | Register Navigation Home Blog Forums FAQ Home Home : All Forums : Hardware : APU Search Forums Go APU2C4 max throughput? Recent Posts My Posts My Subscriptions Subscribe New Topic Reply Next 1 2 bit_shifter - Posted Apr 22nd 2016 Quote Rate Hi, I just received my APU2C4 and I'm trying to set it up as a firewall/router. I updated the BIOS to 20160311, which seems to be the latest, My Posts and I installed OpenBSD 5.9 on the internal mSATA SSD. I have almost nothing setup or installed beyond the base OpenBSD install except Posts: 2 iperf to test performance. I've tested throughput several times on em0 and em2 interfaces, with iperf, and I seem to be maxing out around 670 mb/s as a server and 420 mb/s as a client. I'm testing to two other very different machines connected via an unmanaged gigabit switch -- an Arch Linux desktop machine and a FreeBSD 10.3 machine. Between the Arch Linux and FreeBSD machines I can get a full ~950 mb/s both ways. If I run top on the APU while the iperf tests are running, I see that 1 out of the 4 cores is at ~100% usage from a system process -- this bounces around to different cores while it runs. So, it would seem that, at least with low mtu sizes (default 1500), this might be the cap on throughput. Is this an OpenBSD limit? Has anybody gotten better throughput using Linux or FreeBSD/pfSense? I've tried all of the suggestions on https://calomel.org/network_performance.html as well, but they made no real difference. The only thing that got me any real performance benefit was disabling pf, which I obviously won't do once this is in production. Once I set the NIC's MTU to 9000, I'm able to saturate the gigabit link, even with pf enabled (albeit with no rules currently). Are there any down sides to having the NICs default to 9000 MTU? I remember having compatibility issues at one point due to "jumbo frames", but I don't remember the specifics of it. I've got a mix of wired and wireless devices in the house including: PCs, game consoles, IP cameras, and Android phones. My WAN link via Comcast is only 125 mbps right now, so even the default MTU will saturate that, but I might be getting a gigabit link in the near future and I don't want the router to be the weak link. I'm new to OpenBSD, so there's a possibility that I'm missing something obvious, but I've tried to do my homework on it. Thanks for any information. Rhysee - Posted Apr 22nd 2016 Quote Rate What temps are you getting ? Wondering if you are using PfSense ? .. 950mb/s seems accetable? My Posts Posts: 15 bit_shifter - Posted Apr 23rd 2016 Quote Rate Rhysee - Posted 16 Hours Ago My Posts Posts: 2 What temps are you getting ? Wondering if you are using PfSense ? .. 950mb/s seems accetable? For temps, it maxes out around 63C during a CPU-intensive workload like memtest. It idles around 56C. I'm using OpenBSD 5.9 on the APU. 950 mb/s is definitely acceptable! I guess I wasn't very clear on that part -- I'm getting 950 mb/s between two desktop machines on the same network with no APU involved. I just tested that to verify that neither of those machines was the bottleneck when testing with the APU. I AM able to max out a gigabit link (950 mb/s+) on the APU when I change the MTU to 9000. I wanted to verify that setting the MTU to a higher number wasn't going to cause compatibility issues or limit me when(/if) I get a gigabit fiber to the home connection. I guess FTTH providers would allow higher MTUs? If they don't, then this hardware (or software?) won't cut it for me when that time comes. If it's a limitation of OpenBSD, whether the driver or TCP/IP stack, then I'll switch to something else -- preferably pfSense. I just would rather not wipe this OpenBSD install just to test pfSense to see whether it will be the same. EDIT: Degrees C, not F... Post last edited Apr 23rd 2016 sparkie - Posted Apr 24th 2016 Quote Rate What exactly did you test? Forwarding with firewall rules between APU2C4 ethernet ports? In the simplest case I'm running 2 APU2C4 boards against each other on the same network (2 low-cost/unmanaged switches in between). My Posts No firewalling (iptables) at all involved in this test. One APU2C4 as iperf server the other one as iperf client gives me excellent: Posts: 31 32 root@rota2[/root] > iperf -c rota1 ------------------------------------------------------------ Client connecting to rota1, TCP port 5001 TCP window size: 43.8 KByte (default) ------------------------------------------------------------ [ 3] local 192.168.24.78 port 35547 connected with 192.168.24.79 port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 1.10 GBytes 942 Mbits/sec I'm running Debian 8.4 (i686 GNU/Linux) on both machines 24/7. Temperature stays around amazing 56C most of the time. 34 root@rota2[/root] > sensors k10temp-pci-00c3 Adapter: PCI adapter temp1: +56.1°C (high = +70.0°C) (crit = +105.0°C, hyst = +104.0°C) Post last edited Apr 25th 2016 arfett - Posted May 17th 2016 Quote Rate I realize this isn't the most hardcore test of throughput but on my APU2C4 running Ubuntu Server 15.10 with kernel 4.5.1 I can run speed tests at 340-380mbit download and all 4 of my cores are 92% idle or more. Torrenting at these speeds with many hundreds of connections my cores are about 90% idle or more. I suspect I'll have zero issues firewalling full gigabit when that's available to me this summer. My Posts Posts: 9 My iptables rules below: Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 23970 2158K ACCEPT all -- enp2s0 any anywhere anywhere ctstate RELATED,ESTABLISHED 0 0 ACCEPT tcp -- enp2s0 any anywhere anywhere multiport dports REMOVED,REMOVED 3419 531K ACCEPT tcp -- br0 any anywhere anywhere multiport dports REMOVED,REMOVED,REMOVED,REMOVED,REMOVED 6516 546K ACCEPT all -- lo any anywhere anywhere 18 696 ACCEPT icmp -- enp2s0 any anywhere anywhere icmp echo-request 0 0 ACCEPT icmp -- br0 any anywhere anywhere icmp echo-request 0 0 ACCEPT icmp -- br1 any anywhere anywhere icmp echo-request 114K 24M REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 20M 79G ACCEPT all -- enp2s0 br0 anywhere anywhere ctstate RELATED,ESTABLISHED 1360K 4776M ACCEPT all -- enp2s0 br1 anywhere anywhere ctstate RELATED,ESTABLISHED 20M 8933M ACCEPT all -- br0 enp2s0 anywhere anywhere 3354K 187M ACCEPT all -- br1 enp2s0 anywhere anywhere 1654 89808 ACCEPT tcp -- any any anywhere REMOVED tcp dpt:REMOVED 0 0 ACCEPT udp -- any any anywhere REMOVED udp dpt:REMOVED 0 0 DROP all -- any any anywhere anywhere Chain OUTPUT (policy ACCEPT 107K packets, 27M bytes) pkts bytes target prot opt in out source destination Chain PREROUTING (policy ACCEPT 208K packets, 27M bytes) pkts bytes target prot opt in out source destination 1830 97244 DNAT tcp -- enp2s0 any anywhere anywhere tcp dpt:REMOVED to:REMOVED:REMOVED 0 0 DNAT tcp -- enp2s0 any anywhere anywhere tcp dpt:REMOVED to:REMOVED:REMOVED Chain INPUT (policy ACCEPT 36 packets, 1684 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 7537 packets, 746K bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 2984 packets, 304K bytes) pkts bytes target prot opt in out source destination 103K 9957K MASQUERADE all -- any enp2s0 anywhere anywhere mattlach - Posted Jun 7th 2016 Quote Rate bit_shifter - Posted Apr 22nd My Posts Posts: 11 Hi, I just received my APU2C4 and I'm trying to set it up as a firewall/router. I updated the BIOS to 20160311, which seems to be the latest, and I installed OpenBSD 5.9 on the internal mSATA SSD. I have almost nothing setup or installed beyond the base OpenBSD install except iperf to test performance. I've tested throughput several times on em0 and em2 interfaces, with iperf, and I seem to be maxing out around 670 mb/s as a server and 420 mb/s as a client. I'm testing to two other very different machines connected via an unmanaged gigabit switch -- an Arch Linux desktop machine and a FreeBSD 10.3 machine. Between the Arch Linux and FreeBSD machines I can get a full ~950 mb/s both ways. If I run top on the APU while the iperf tests are running, I see that 1 out of the 4 cores is at ~100% usage from a system process -- this bounces around to different cores while it runs. So, it would seem that, at least with low mtu sizes (default 1500), this might be the cap on throughput. Is this an OpenBSD limit? Has anybody gotten better throughput using Linux or FreeBSD/pfSense? I've tried all of the suggestions on https://calomel.org/network_performance.html as well, but they made no real difference. The only thing that got me any real performance benefit was disabling pf, which I obviously won't do once this is in production. Once I set the NIC's MTU to 9000, I'm able to saturate the gigabit link, even with pf enabled (albeit with no rules currently).