OPNsense Forum

English Forums => General Discussion => Topic started by: Arnau97 on September 06, 2023, 05:15:08 PM

Title: How can I measure firewall capacity?
Post by: Arnau97 on September 06, 2023, 05:15:08 PM
Hello guys, I'm new with OPNsense and also in this forum.

I want to install OPNsense on a server (hp proliant) and I would like to measure the firewall capacity that it will have. Do you know how can I do that?

Thanks.
Title: Re: How can I measure firewall capacity?
Post by: Patrick M. Hausen on September 06, 2023, 06:57:35 PM
Define "firewall capacity".
Title: Re: How can I measure firewall capacity?
Post by: Arnau97 on September 07, 2023, 07:24:02 PM
(https://i.imgur.com/nKw5Fux.png)

That firewall capacity, but instad from a OPNsense official product, from my own server with OPNsense software installed
Title: Re: How can I measure firewall capacity?
Post by: Patrick M. Hausen on September 08, 2023, 08:26:35 AM
You will need two identical systems or some other box of which you know that it outperforms your OPNsense by an order of magnitude, if you want to measure VPN throughput.

You need a test lab with at least 10G or faster infrastructure.

You need a handful of dedicated machines to serves as source and destination on both sides of your firewall and/or the VPN tunnel.

Then you can run pkt-gen/netmap on these - or buy/lend some hardware packet generator.

Then measure.