Thanks for the link. Looking for a 1u rack mountable chassis though so I can eventually move it to a rack.the sale is sold out
Edit: Chassis ~$70 so cheaper options exist:
http://www.supermicro.com/products/chassis/Mini-ITX/101/SC101i.cfm
Thanks for the link. Looking for a 1u rack mountable chassis though so I can eventually move it to a rack.the sale is sold out
Edit: Chassis ~$70 so cheaper options exist:
http://www.supermicro.com/products/chassis/Mini-ITX/101/SC101i.cfm
we will see for QA...While I am not generally fond of buying stuff with the hope that something "might" be implemented in the future, the rangeley platform has some serious potential for becoming an awesome VPN box. As Patrick mentioned, Rangeley (c2558/c2358/c2758) supports QuickAssist, which is a separate crypto engine that should be many times more efficient than using AES-NI.
I do not consider these numbers very accurate (they change a little for every blog post), but if they hold up somewhat, the QA in a C2758 should be able to do 7/8Gbps IPSEC (src 1, 2) and a "fast quad core Xeon" should be able to do about 2 Gbps IPSEC (src 2).
Apparently QA in C2558 is slower than C2758, but even half of 7/8 Gbps is pretty awesome for such as small box.
try to act as vpn client or serve vpn server. openvpn is very common ..I have the A1SAi version of this board, and I run Sophos UTM 9 on it, and its rock solid, and performs awesome. Highest CPU so far is about 9% when I was doing a major version upgrade a few months past.
Only thing to be aware of, these boards DO NOT support ANY non ECC memory. So just make sure you plan for that when ordering hardware (my supplier told me my ram was ECC, when in fact it wasn't, and I had to wait an extra 2 weeks to get my ram... grrrr).
I means, marve.. performance is not good haha...'Cept for the corners of the chip when it's soldered to the board itself
Running fully busy with vpn tunneling?...I have this boards bigger brother the A1SRi-2758F and use openVPN a lot. The unit is hosting 1 server and 4 clients to route my traffic accordingly and @ 185Mbps, through the various tunnels, it sits at 13% CPU. These boards are pretty sweet.
Yes, I typically max out my connection over tunnels but have no looked at if one proc is processing it all or not because I'm lazy and just check the pFsense gui =)Running fully busy with vpn tunneling?...
Check on htop..
That could be one core is processing..
While the AES Encryption Standard competition took over 5 years with multiple rounds and many reviews, the AES Standard was not finalized until Nov 2001. Perhaps in 1990 you were using 3DES or another algorithmwe will see for QA...
...
AES has been used many years back in 1990 and works!
and I am glad intel put AES to N series SoC processor..
I think 90... , read many paper on AES and was studying in university before move to us in late 90.. to continue my study and stuck in US after graduation..While the AES Encryption Standard competition took over 5 years with multiple rounds and many reviews, the AES Standard was not finalized until Nov 2001. Perhaps in 1990 you were using 3DES or another algorithm
thanks.Yes, I typically max out my connection over tunnels but have no looked at if one proc is processing it all or not because I'm lazy and just check the pFsense gui =)
As far as I now you simply set it up under System > Advanced settings > Miscellaneous > Cryptographic hardware and then in your OpenVPN profile set Encryption algorithm to match the server side while leaving Hardware Crypto to No hardware Crypto Acceleration.Make sure you run a recent config too, pfsense took awhile to enable aes-ni properly for example.
The Supermicro Web Page for this motherboard indicates that the p/n for the IO Shield is MCP-260-00042-0N. It's a very standard part readily available on eBay.Anyone know where I can get a backplate for one of these MB's?