TinyMiniMicro firewall edition

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

mach3.2

Active Member
Feb 7, 2022
130
87
28
which CPU version do You recommend for 1G/1G fiber with few vlans and wireguard for two remote sites?
What's your expected Wireguard throughput? If you're not too picky about your S2S Wireguard throughput, anything Haswell and up should do the trick.

For reference, I'm running a virtualised pfsense install with paravirtual NICs on an i7 4770.
I get about ~2Gb/s of inter-VLAN routing and Wireguard seem to top out at around 500Mbps.
You'll probably get a little bit more throughput out of it on bare metal.
 

zer0sum

Well-Known Member
Mar 8, 2013
849
474
63
which CPU version do You recommend for 1G/1G fiber with few vlans and wireguard for two remote sites?
If you have the budget I'd be looking for the M90q as they come with an i5-10500T and can be found for ~$300 if you're patient.

I just picked one up last week for $305 and will be swapping out my M920q with it's 8500T :)
 

zztoper

New Member
Mar 12, 2022
4
0
1
If you have the budget I'd be looking for the M90q as they come with an i5-10500T and can be found for ~$300 if you're patient.

I just picked one up last week for $305 and will be swapping out my M920q with it's 8500T :)
getting hands on such one will be difficult in my country. Most common here is i3-8300T.
 

truongnht

New Member
Oct 25, 2023
10
0
1
Yes, 2 cores, but palo, pfsense, etc. will only put that session on one core.

A speed test like this is a single stream and therefore it will only run on a single core, so really you are always limited when using a CPU.
If you want max speed you would have to choose a CPU with the fastest single core performance you could find, like an overclocked 13600/700/800/900K :D
@zer0sum does Mx20q work with 13600/x00k cpu? Have you tested the setup?