Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #235900 > unrolled thread

pppoe performance on debian and debian as router / firewall

Back to article view | Back to linux.debian.user

Contents

  pppoe performance on debian and debian as router / firewall Antonio <debian_user_english@xachodixen.org> - 2021-06-05 20:20 +0200
    Re: pppoe performance on debian and debian as router / firewall basti <mailinglist@unix-solution.de> - 2021-06-05 22:40 +0200
    Re: pppoe performance on debian and debian as router / firewall Michael Stone <mstone@debian.org> - 2021-06-06 02:20 +0200
    Re: pppoe performance on debian and debian as router / firewall Andrei POPESCU <andreimpopescu@gmail.com> - 2021-06-06 13:30 +0200

#235900 — pppoe performance on debian and debian as router / firewall

[Multipart message — attachments visible in raw view] — view raw

Hi,

I'm planning to setup a router and firewall based on debian for my home 
lab.

I know there are better (I mean, easier...) choices for this type of 
machine (have tried some of them, currently using pfsense) but I do want 
to find out if I could use debian.

The problem is my ISP uses pppoe for my symmetric 1 gbps connection and 
I know this type of connection requires a quite performant cpu, as it is 
single-threaded and uses only one cpu core. I'm currently using a 
supermicro motherboard with a (four core) N3710 and setting up ipfire, 
pfsense, opnsense or similar to use all my bandwidth is a real pain (if 
even possible...)

I've been looking for reports on pppoe performance in debian on similar 
hardware but have found none (most people seem to be using freebsd-based 
firewalls these days), so my questions are:

Does anyone here have any experience using debian as of router and 
firewall on such hardware as mine using pppoe?

Is there any way debian could use the four cores of my cpu to handle 
pppoe traffic? Or any other way to improve pppoe performance...

And finally, I am planning on using shorewall for the firewall. I have 
been looking at the docs but have found no examples for a 4 nic machine. 
I guess that's possible, isn't it?


Cheers!

[toc] | [next] | [standalone]

#235904

Hello,
you can use PPPoE with rp-pppoe (kernel-modul). On my RPi 3 it has a
better performance as run PPPoE in userspace.

I do not know if it multiple cores.

Am 05.06.21 um 20:07 schrieb Antonio:
> Hi,
> 
> I'm planning to setup a router and firewall based on debian for my home
> lab.
> 
> I know there are better (I mean, easier...) choices for this type of
> machine (have tried some of them, currently using pfsense) but I do want
> to find out if I could use debian.
> 
> The problem is my ISP uses pppoe for my symmetric 1 gbps connection and
> I know this type of connection requires a quite performant cpu, as it is
> single-threaded and uses only one cpu core. I'm currently using a
> supermicro motherboard with a (four core) N3710 and setting up ipfire,
> pfsense, opnsense or similar to use all my bandwidth is a real pain (if
> even possible...)
> 
> I've been looking for reports on pppoe performance in debian on similar
> hardware but have found none (most people seem to be using freebsd-based
> firewalls these days), so my questions are:
> 
> Does anyone here have any experience using debian as of router and
> firewall on such hardware as mine using pppoe?
> 
> Is there any way debian could use the four cores of my cpu to handle
> pppoe traffic? Or any other way to improve pppoe performance...
> 
> And finally, I am planning on using shorewall for the firewall. I have
> been looking at the docs but have found no examples for a 4 nic machine.
> I guess that's possible, isn't it?
> 
> 
> Cheers!
> 

[toc] | [prev] | [next] | [standalone]

#235908

On Sat, Jun 05, 2021 at 08:07:56PM +0200, Antonio wrote:
>The problem is my ISP uses pppoe for my symmetric 1 gbps connection and I know
>this type of connection requires a quite performant cpu, as it is
>single-threaded and uses only one cpu core.

That's not correct for linux kernel mode pppoe; it's a major limitation 
for many popular freebsd-based firewalls, but that's an implementation 
issue not a law of nature. 

[toc] | [prev] | [next] | [standalone]

#235912

[Multipart message — attachments visible in raw view] — view raw

On Sb, 05 iun 21, 20:07:56, Antonio wrote:
> 
> The problem is my ISP uses pppoe for my symmetric 1 gbps connection and I
> know this type of connection requires a quite performant cpu, as it is
> single-threaded and uses only one cpu core. I'm currently using a supermicro
> motherboard with a (four core) N3710 and setting up ipfire, pfsense,
> opnsense or similar to use all my bandwidth is a real pain (if even
> possible...)

Well, 1Gbit/s can be a challenge for the typical router processors, but 
as far as I know those are seriously underpowered compared to even low 
powered x86 CPUs.

For example, the TPLink Archer C7 has to offload some of the processing 
to dedicated hardware and performance can suffer if that is not properly 
supported in Linux.
 
> I've been looking for reports on pppoe performance in debian on similar
> hardware but have found none (most people seem to be using freebsd-based
> firewalls these days), so my questions are:
> 
> Does anyone here have any experience using debian as of router and firewall
> on such hardware as mine using pppoe?

Debian is using the standard Linux kernel, so I would expect results 
from any other general purpose distro to be comparable.

Even OpenWrt could be interesting, though it is probably tweaked quite a 
lot more for this use case compared to Debian.
 
> Is there any way debian could use the four cores of my cpu to handle pppoe
> traffic? Or any other way to improve pppoe performance...

The OpenWrt forum could provide some interesting information.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web