DEC3920 / DEC3940 / DEC3960 CPU

[dirtyfreebooter]

does anyone know what CPU is in the DEC3920 / DEC3940 / DEC3960 series? why opnsense product page never state this is annoying. trying to figure out if it how well it would do wireguard and zenarmor, my guess is terrible, otherwise they would publish the specs

[pfry]

Hm. Either the Ryzen 8840U/8845HS or the Epyc 2435. I'd guess the latter, but it's just a guess. Not likely an Intel, as it'd be hard to find a model with 8 homogenous cores.

It has a stat for Wireguard: 4.23Gbps/410kpps, which seems low, but it's not something I've tested. "Threat Protection" is 7.93Gbps/700kpps. IPS software is not specified. Also not something I've tested.

What kind of performance are you looking for?

[dirtyfreebooter]

i don't think its any of those based on the TDPs. *shrug*. zenarmor being singled threaded, i just would like to support opnsense, but this sort of hiding of information is nonsense, if i am going to spent $2000+ on a router, i'd like to know the exact specs.

[pfry]

i don't think its any of those based on the TDPs.[...]

They look OK to me. ~30W idle, ~150W max. My own firewall is similar (a 7700X), but with a bit higher power limit.

But yes, if it was up to me I'd publish more data. And send one to ServeTheHome. The folks there really don't have a complete firewall test suite (I'd like to see e.g. session setup rate and time to set up, say, 1500 VPNs), but I don't know of any review site that does.

[sopex8260]

At some point, someone will buy it and probe it at bsd-hardware info. Give it some time :)

[patient0]

i don't think its any of those based on the TDPs. *shrug*. zenarmor being singled threaded, i just would like to support opnsense, but this sort of hiding of information is nonsense, if i am going to spent $2000+ on a router, i'd like to know the exact specs.

The TDPs are confusing and don't fit anything in the AMD lineup, if you assume that they choose a chip without a graphic card.

Since it's 8 cores, DDR5 RAM and probably 10GbE on the SOC you'd think an EPYC series one (but none fit the TDP). With GPU the AMD Ryzen™ AI Embedded P164 would be a possible candidate (TDP 28W, 8C/16T, DDR5 RAM) but total waste of a GPU and don't know if you can get it with 10GbE.

I'm pretty sure it's based on AMD, developing a custom board is hard for a small team and they would need support from the manufacturer and everything else is based on AMD.

Let's have a look at the numbers:

The DEC3800 is based on AMD EPYC 3101/3201 and DEC4200 on AMD EPYC 3251/3451.

DEC3800: Firewall Packets Per Second 1200Kpps 1450Kpps, Firewall Throughput 14.4Gbps 17.4Gpbs
DEC3900: Firewall Packets Per Second 3070Kpps, Firewall Throughput 36.8Gbps
DEC4200: Firewall Packets Per Second 1760Kpps 5000Kpps, Firewall Throughput 21.1Gbps 60Gbps

It's double the performance of the EPYC 3201 (DEC386X) and about 75% more performance then the EPYC 3251.

[Patrick M. Hausen]

Send an inquiry to sales@, maybe? 🙂

[Seimus]

trying to figure out if it how well it would do wireguard and zenarmor

That information would not actually tell you how well Zenarmor or WG would run. From the general benchmark provided for that specific CPU its not clear. The only real way to know, is to actually implement those features on that device and test.

For overall performance, OPN has a sheet under the product that contains throughput and pps as well IPS throughout for Suricata. And those benches are the base you should consider when buying a HW.

Otherwise contact Sales as mention by Patrick they can provide more details.

Regards,
S.

[pfry]

The TDPs are confusing and don't fit anything in the AMD lineup[...]

How not? The Epyc 2435 has a TDP of 45/55W, and likely has an actual max consumption of 65-100W. That seems to fit into the ~150W (estimated from 100V @ 1.5A) max for the 39x0, given the lack of specific stats. I don't think it would be more, given the (apparent) design of the Netboard A20 g2; less is easily configured via BIOS.

[patient0]

How not? The Epyc 2435 has a TDP of 45/55W

Because the website listed 28/30/36W as typical power consumption and for the other appliances the value mentioned is around the TDP value of used CPU.

# model, typical power, cpu TDP
DEC600, 13W, AMD GX-420MC TDP 17.5W
DEC700, 15W, AMD V1500B TDP 15W
DEC800, 40/45W, AMD EPYC 3101/3201 35/30W
DEC4200, 55/80W, AMD EPYC 3251/3451 55/80-100W

But your guess is as good as mine.

[dirtyfreebooter]

That information would not actually tell you how well Zenarmor or WG would run.

i'm sorry, this is so completely wrong. wtf are you even talking about.  you can literally correlate passmark scores to both zenarmor and wireguard performance. zenarmor scales linearly with a single CPU and wireguard scales multi-core. i have tested 15+ different cpus over the past few years and you can get a pretty good idea of zenarmor's performance with single core performance scores and wireguard's with multicore performance scores.

sure after you factor in 1000s of connections, etc, that probably changes a bit, or past 10gbe speeds but for home or light duty business, its close enough.

someone is going to buy one eventually and post the info, why not just include it on the product page.