Zenarmor performance @ Intel Atom C3758R

[tpf]

Hi,
does anybody have experience in running Zenarmor at Intel Atom C3758R? What internet troughput can this CPU handle? The CPU-list at Zenarmor's website give me not an clear answere.

Thank's!

[meyergru]

Since Zenarmor still is limited to one thread only, you can simply relate any known CPU's single-thread performance against the C3758R's single-thread perfomance on one of the many CPU-Performance comparison sites. The kind of work Zenarmor is doing here cannot be easily accelerated by a proprietary chip, unlike encryption.

So, choose a CPU whose performance you know and compare it.

[tpf]

I know that Zenarmor only use one core. That's the cause of my question. On their roadmap, multi-core operation would be implemented in the next 1-6 months(or so).

So badly I need experience from working devices... My personal experience: 1 GBit without TLS-inspection is nearly possible in my lab. 1 Core @100% Iperf3 with 10 parallel streams + OpenSpeedtest. But that's lab. Not repesentive for an company's Internet-Traffic-Mix.

[meyergru]

I keep hearing that multi-threading support is on the top of the priority list for some years now. Sounds like when Trump says "in two weeks".

And yes, you would be hard pressed to find a low-power (embedded) CPU with a high enough single-thread performance to run Zenarmor at >= 1 GBps speeds. Only desktop or high-performance server CPUs (many server CPUs have many cores, but low single-thread performance) would do that.

And even then, you would only use a fraction of the potential power, but have the high cost (both purchase and consumption) until multithreading will be supported.

[Greg_E]

I thought multithread was available in one of the paid versions?

The faster the clock speed, the better ZA will run, kind of the only rule of thumb we currently have. I'm looking at an n355 device for my next hardware, something with at least 6 i226 ports and maybe trade a couple for some SFP+ (10g lan to lan would be NICE). I only have gigabit out to wan, so don't need the i226, but it's what I'm finding because it's what most people want going forward.

Also looking at a different model with 8 i226 ports, not seeing anything with "cheaper" i350 ports anymore, and I'm not going to try Realtek for real work.

[dirtyfreebooter]

I thought multithread was available in one of the paid versions?

The faster the clock speed, the better ZA will run, kind of the only rule of thumb we currently have. I'm looking at an n355 device for my next hardware, something with at least 6 i226 ports and maybe trade a couple for some SFP+ (10g lan to lan would be NICE). I only have gigabit out to wan, so don't need the i226, but it's what I'm finding because it's what most people want going forward.

Also looking at a different model with 8 i226 ports, not seeing anything with "cheaper" i350 ports anymore, and I'm not going to try Realtek for real work.

the roadmap has it 90% complete and has it listed under business and higher licenses, so no paid home license.

[Seimus]

Correct, the MultiCore is still not available for ZA.
Correct, the Multicore if released will be most likely a paid feature (Higher paid tiers) per the roadmap. Even tough several times people asked ZA to clear this point they did not. and only side tracked the question. But assuming whats on the roadmap this looks like the case.

I'm looking at an n355 device for my next hardware, something with at least 6 i226 ports and maybe trade a couple for some SFP+ (10g lan to lan would be NICE).

I have one with 2x10G AQ NICs + 4x2.5G i226V, and its rock solid. Still looking for a good 10G switch option thou....

Regards,
S.

[Greg_E]

I have one with 2x10G AQ NICs + 4x2.5G i226V, and its rock solid. Still looking for a good 10G switch option thou....

Define good. I have a Mikrotik CRS 326-24s+2q+ that works well, 24 sfp+ and 2 qsfp+ ports (mine are broken out to 8 more 10g ports). I also have their smaller CRS309-1g-8s+in (or something like that) which also work very well but I outgrew it, needed more ports. Those are really the cheapest options I would personally look at. I don't have much for 10g copper, generally I don't like it due to module heat, a DAC or fiber works better for a lot of things. My NAS has an AQ copper 10g connection, so I do have a hot module in the CRS 326.