why is eastpect locked to a single core

Started by johndchch, October 17, 2022, 10:39:21 PM

Previous topic - Next topic
Hi,

Great news! After carefully reviewing the roadmap timeline, the product team has decided to prioritize shipping the multicore support in the first quarter of this year.

Quote from: sy on November 29, 2023, 08:54:04 PM
Hi,

Great news! After carefully reviewing the roadmap timeline, the product team has decided to prioritize shipping the multicore support in the first quarter of this year.

Excellent news, thanks Sy. In the meantime, will enabling RSS drive some benefit? I appreciate it is experimental but on the i210 NIC it seems most people have no problems?

I've placed an order for this appliance. It's an overkill for just Zenarmor at gigabit speeds or perhaps even with wireguard enabled. But I'll find some use for its processing power.

https://cwwk.net/products/i5-1335u-i7-1355u-13th-gen-2-5g-soft-router-intel-6x-intel-i226-v-fanless-mini-pc-firewall-appliance-proxmox-pfsense?variant=44933248975080

Hoping to have it in hand soon.

Quote from: sy on November 29, 2023, 08:54:04 PM
Hi,

Great news! After carefully reviewing the roadmap timeline, the product team has decided to prioritize shipping the multicore support in the first quarter of this year.

Really good news when I plot it on the growing internet speeds.2- 4-8Gigabit could be ordered for home use.

Thanks for listing to the customer install base.

Even with lower specs it is too expensive for me.
OPNsense HW:

Minisforum Venus series UN100C, 16 GB RAM, 512 GB SSD
T-bao N9N Pro, 16 GB RAM, 512 GB SSD

Yay!  Waiting for this before installing again.

Hi @sy,

any news on multicore progress? If there's a beta program I can subscribe to, happy to test!

I will add to the multithreaded request, any news yet?

Hi All,

We needed to make a bit of differences in our roadmap due to SSE and SASE features. It is kept in roadmap but it seems at the end of this year or at the first quarter of next year.

March 05, 2024, 08:08:08 AM #24 Last Edit: March 05, 2024, 08:13:04 AM by almodovaris
For most users multithreaded easpect would mean close to 4 times lower CPU specs needed, which would allow them to use a lot of older hardware. And thus be more willing to pay for a Zenarmor license.

It's usually the bill for the electrical power which scares them, not the price of the device. Since it's very hard to find high-specs devices, for a normal price, which don't use a lot of power. I'm lucky that I bought my Venus series for less than 200 Euro per piece. Now their prices are getting crazy, that is if you can buy them at all.
OPNsense HW:

Minisforum Venus series UN100C, 16 GB RAM, 512 GB SSD
T-bao N9N Pro, 16 GB RAM, 512 GB SSD

I'll have to test on my hardware, but lack of multithreaded performance may stop me from using this. If it runs OK on my test system, and runs OK on my future production, then maybe. But as mentioned, it will allow much lower end processors, or much higher throughput in a multithreaded configuration.

the bigger issue is the increased availability of 2.5gbs and higher connections - it's very hard to find a cpu with sufficient single-core speed to handle those kind of speeds in zenarmor - you generally end up with a bottleneck




correct, 2.5gbit everywhere. On my main 10port switch only 1 device remains 1gbit. Everything including WiFi6E and ISP is 2.5gbit nowadays, and that will go away fast with WiFi7 and regular ISP speed improvements. I've got Gold 8505 CPU, on par with N305, and it's suffocating. I'm puzzled how something 10x faster (in crypto benchmarks up to 200x faster) than a top Arm router struggles with everything, from VPN to ZenArmor. Looks like we will need water cooled Threadripper machines soon.

Quote from: sy on March 04, 2024, 07:33:56 PM
Hi All,

We needed to make a bit of differences in our roadmap due to SSE and SASE features. It is kept in roadmap but it seems at the end of this year or at the first quarter of next year.

:( disapointing news...  gigabit plus wan and 10 gig lan backbone would have liked to see multicore support.

I'm going to throw this out there...

As much as I want multithreaded performance, I also want it to be done right! Please don't rush something that immediately breaks when it gets in the hands of people like me with hardware you could never test on. Please just make it right the first time. Just raise the priority a little if possible.