With proxmox and low-end CPU (E5-2403v2), I'm able to push 500 mbit/s in AES-256-CBC / SHA256 (OPNsense 20.7), the virtual machine config cpu "host" and nic "virtio", and AES-NI box checked in the guest (don't test without).
But agree with kapone, in many case, prefer hardware firewall !
Got second hand Intel DC S3700 400Gb (Dell branded SSDSC2BA400G3T).
One of the unit don't work after shippment, isdct say "BAD_CONTEXT_1042 UB".
Anyone have an idea to unbrick this ?
Smart of the failed drive :
root@SuperSAN:~# smartctl -a /dev/sdj
smartctl 6.6 2017-11-05 r4594...
Recently buy the QNAP QXG-5G1T-111C for 56€ beacause I have a MSI Z97M and only pci-e x1 2.0 not open available. I get 2.90 Gb/s, this is nearly 3x improvement over 1Gbs with PCI-E 2.0, happy with it.
Edit : The QXG-5G1T-111C is PCI-E 3.0, maybe I could make a test in PCI-E 3.0 if you want to...