DEC2752 vs custom Intel Xeon E3-1220 v5

[EVAgames]

Hi everyone. I have a client that is running custom built 1U (short depth) router with Intel Xeon E3-1220 v5. Interesting part, that it is in office with up to 100 online devices during the day and redundant 1gbps uplink. More than 20 active IPSEc tunnels. 6 VLANs. Uplinks are using integrated i210 1gbps ports and 82599ES SFP for internal communication. https://bsd-hardware.info/?probe=1687988f93

Quite a beast until you run Zenarmor. then CPU is almost dead. Anyway, I always prefer a way to support a OPNsense and client would like to move to some "non custom" solution. DEC2752, according the PDF, looks like a perfect candidate. But logic kick in and states that V1500B is slower than E3-1220 v5, so it would look more like a downgrade.

How does it work, DEC2770/DEC2752 are typical PC arch devices or maybe they do have some additional HW optimization?

[meyergru]

The CPUs are in the same league, with the Xeon having a slight advantage, albeit at a higher power draw (it is also the much older CPU). Both have almost the same CPU feature set (AVX2, AES-NI) and memory speed, so, yes, it would probably be a downgrade.

The NICs are connected via PCI(e) in both cases, with each having some offloading features, but that does not matter once you have to route packets between different interfaces and also, FreeBSD can likely not make use of many of the offloading features.

With encryption or packet inspection like in Zenarmor, you need raw CPU power anyway. Deciso has some other offerings that might better suit your needs ;.)

[EVAgames]

Thank You. Helped a lot. One last "Q". In case OPNsense business edition is not renewed (let's say someone forgets witch is a normal thing in companies). How does the device act? No more updates or just stops?

[Patrick M. Hausen]

Continues to work, no more updates.