OPNsense Forum

English Forums => Hardware and Performance => Topic started by: kenmkijkl on November 08, 2021, 04:53:16 pm

Title: Building 100 Gb/s firewall, VPN
Post by: kenmkijkl on November 08, 2021, 04:53:16 pm

I'm looking for advice on hardware for high-throughput firewalls, with VPN, to connect two sites.  Currently I use SuperMicro boxes with Intel or Chelsio 10Gb/s cards, but it's time to upgrade to 100Gb/s.  The Intel E810 cards aren't shown on the FreeBSD hardware compatibility list; the Chelsio T62100-CR, T62100-LP-CR, and T62100-SO-CR cards are listed, although I haven't figured out the differences between them, or which would be best for this.

Suggestions, recommendations, or amusing horror stories would be appreciated.

Thanks.

- Ken

Title: Re: Building 100 Gb/s firewall, VPN
Post by: mimugmail on November 08, 2021, 06:04:59 pm

I wouldnt expect more than 10GB IPsec, no matter which  hardware

Title: Re: Building 100 Gb/s firewall, VPN
Post by: Patrick M. Hausen on November 08, 2021, 06:07:11 pm

You might want to look into the BSD Router Project, if only for hardware and tuning/benchmarking docs.

https://bsdrp.net/documentation/examples