Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 749 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Home CPU for 700/350Mbps internet link

diogogm

Hi everyone,

Searching on community about CPUs for XG Home I only found topics about older CPUs suggestions. Here's my home network details and goals with XG Home:

Current network:

  • Internet Downlink/Uplink: 700/350Mbps (monthly average internet usage 40/50Mbps)
  • Router Cisco ISR 1100
  • LAN IPs: 30~40
  • 2 GRE Tunnels no encryption
  • IPFIX Flow
  • 6 ACL
  • 1 Route-map to re-route a IP from LAN to a tunnel

I need a CPU that will not throttle at peak usage of my 700/350Mbps link, must support the configurations above and I expect at least 100Mbps of SSL inspection, here are my options:

  • Intel Pentium N6005
  • Intel i5 1135G7
  • Intel i7 1165G7
  • AMD Ryzen 5 5600U (Note: I found an appliance with this CPU at same price as i5 1135G7) 
  • AMD Ryzen 7 5800U (Note: I found an appliance with this CPU at same price as i7 1165G7)
  • Open to other CPU suggestions Slight smile

I'm really considering N6005 (my wallet choice), however I'm not sure if it can handle my internet traffic, my second options are the AMD CPUs, I would run the XG on ESXi 8.0 and use the extra cores for something else.

Thank you!



This thread was automatically locked due to age.
  • 0

    Hi.

    the basic rule for home use CPU selection is the faster the better, 4 real cores and you don't need a maths co-processor so a fast Xeon is good.

    Now what the processing throughput is like will depend on what you have enabled.

    My XG115W has a 4 core and my link speed is 1000/50. My configuration allows connection speeds around the 600 max download and 45 upload, though the upload is hamstrung by the infrastructure company. They have funny ideas about upload speeds. With my test XG running a Xeon I can hit around 850 or so depending on time of day. The test machine does not have any serious configuration settings.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    What Xeon model you have running your XG Home?

  • 0
    diogogm said:
    peak usage of my 700/350Mbps link, must support the configurations above and I expect at least 100Mbps of SSL inspection

    Any of the CPU's that you mentioned will be able to do handle it.

    I recommend you stick with the fastest CPU that you can buy. The N6005 should be able to handle around ~500 Mbit/s of TLS Decryption (Or more), all others if setup correctly can-do gigabit of TLS Decryption with multiple connections.

    As an example, the XG115w Rev.3 uses an Intel Atom E3940, this is a very low-end CPU even at Its launch date but still capable of doing ~140 Mbit/s of TLS Decryption. (Before It I had an Intel G5400 and a Ryzen 3300x, the Ryzen could do 10G IPS.)

    If a post solves your question use the 'Verify Answer' button.

    XG 115w Rev.3 8GB RAM v19.5 MR1 @ Home.

  • 0 in reply to diogogm

    I am running a 6c/12t XEON, it is to be used in a VM where the XG will be moved to.

    The XGS devices are moving to AMD chips and top XG use e3-126+ series which is a way overkill for home use. Something ike a 3e-1225v6 should be more than adequate though the newer AMD chips will probably be better and about the same cost.

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • 0

    Got an embedded Epyc (8C/16T) from Supermicro with 4x Gbit, 1x IPMI, 1x NVMe and 1x PCIe 3x 16 slot all on a MiniITX. 4C assigned to the firewall VM and never had an issue with the CPU, never went above 20%.

    Board with CPU costs around 700 EUR add another 200 for 64 GB ECC RAM and you almost got a complete system which is server grade and AFAIK also supported by VMWare.

Unfiltered HTML