Topton i3 N305 device

[bbchucks]

Hi
I'm looking to update my opnsense box since it can't handle 1.5Gigabit speeds with Wireguard due to CPU. Does anyone know if the TopTon i3-N305 would suffice @ Gigabit connections while Wireguard/VPN is enabled?

I'm looking at these two devices -

https://www.aliexpress.us/item/3256805183356992.html?spm=a2g0o.productlist.main.19.3f775902a7NqTx&algo_pvid=33983c62-aa33-4736-9d35-20a486e39ed9&aem_p4p_detail=202311020924503893263087982180000605192&algo_exp_id=33983c62-aa33-4736-9d35-20a486e39ed9-9&pdp_npi=4%40dis%21USD%21556.47%21339.45%21%21%21556.47%21%21%402101f49916989422901355058e026a%2112000032775310541%21sea%21US%21886399869%21&curPageLogUid=ef2P1leBN16R&search_p4p_id=202311020924503893263087982180000605192_2

or this one

https://www.aliexpress.us/item/3256805843834743.html?spm=a2g0o.productlist.main.1.5d2e5a4ev4BdWZ&algo_pvid=ac1139e6-1b5a-4732-a962-24a464a30139&algo_exp_id=ac1139e6-1b5a-4732-a962-24a464a30139-0&pdp_npi=4%40dis%21USD%21731.96%21365.98%21%21%21731.96%21%21%40210318c916989420953625796efffe%2112000035401560041%21sea%21US%21886399869%21&curPageLogUid=hoQFEwS6HtQK

 

[thepsyborg]

I can't claim personal experience, but in theory either of those should be more than sufficient to route 2.5Gbe at wire speed with anything short of Deep Packet Inspection (and maybe even that too if you're not also running a really complex firewall ruleset).

 

[bbchucks]

I can't claim personal experience, but in theory either of those should be more than sufficient to route 2.5Gbe at wire speed with anything short of Deep Packet Inspection (and maybe even that too if you're not also running a really complex firewall ruleset).

just worried during encryption. once wireguard/vpn is on hoping these will handle at least 1Gigabit

 

[mynkow]

I got one with the i3-n305. Single port wireguard 1gbit goes to 80% CPU and 78c cpu temperature. I also got 2 crashes during transfers. The machine just restarts. Tried many settings but none of them made a difference.

 

[Stovar]

just worried during encryption. once wireguard/vpn is on hoping these will handle at least 1Gigabit

I run barebones metal with openwrt, mullvad vpn via Wireguard and hit almost 1gig speeds (am bottlenecked due to 1gig ethernet PC network card), had no issues for over a year with N5105 6 port router and now also N100 6 port router, both do the job fine.

With wire guard its much lighter on the system and multi-threaded so its not like openvpn is.

Anyone having issues with it should try running bare metal pfsense/opensense or openwrt and doing fault checking since it should be more then powerful enough to handle wireguard vpn performance of 1gig+.

 

[mynkow]

I run barebones metal with openwrt, mullvad vpn via Wireguard and hit almost 1gig speeds (am bottlenecked due to 1gig ethernet PC network card), had no issues for over a year with N5105 6 port router and now also N100 6 port router, both do the job fine.

With wire guard its much lighter on the system and multi-threaded so its not like openvpn is.

Anyone having issues with it should try running bare metal pfsense/opensense or openwrt and doing fault checking since it should be more then powerful enough to handle wireguard vpn performance of 1gig+.

This is off-topic. Your CPU has AES built in and plays nicely with wireguard. It is way better than i3-N305.

 

[Stovar]

This is off-topic. Your CPU has AES built in and plays nicely with wireguard. It is way better than i3-N305.

Hi the N305 and even N100 are the upgrade to my N5105 cpu, all 3 have AES built in also.

They really should be able to handle 1gig+ speeds on Wireguard VPN providers give or take the vpn server capacity.

I also feel while these mini routers are great and passive, they tend to benefit from some active cooling even if its a small fan or 120mm silent fan strapped onto the side.

 

[mynkow]

you are correct. My bad. I was thinking about the Intel's QuickAssist technology which actually matters for wireguard.

 

[blunden]

you are correct. My bad. I was thinking about the Intel's QuickAssist technology which actually matters for wireguard.

Only recent generations of QAT have ChaCha20/Poly1305 acceleration. In other words, the older generations of QAT (such as in the Atom C3000 series) don't matter at all for WireGuard.

Thankfully WireGuard is generally very fast in software too, especially with the kernel driver.

 

[fta]

Your CPU has AES built in and plays nicely with wireguard.

AES performance has no relevance to wireguard since wireguard does not use AES.

 

[Stovar]

you are correct. My bad. I was thinking about the Intel's QuickAssist technology which actually matters for wireguard.

No worries, these mini systems have a lot of technology and then it changes every 5 minutes.

If you are having specific issues with your mini router though, its a good idea to post a fresh new post where people maybe able to help since these mini routers can be sometimes hit and miss.