This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Software or Virtual and 300mb connection

Hi,

Seeking advice on a couple issues if I may.

1) From a security point of view would running software version of the Sophos UTM be more secure than running on Hyper-V? I would have thought the answer would be yes to that but interested on opinions.

2) Has anyone built a UTM capable of supporting an internet connection of 300mb down with 30mb up? Interested if anyone has and what hardware they used as I was looking into an Asus P9D-C/4L with a xeon CPU. The usage will mainly be a couple web servers which do get hammered with bandwidth but there are a handful of staff behind it too.

Thanks in advance and look forward to any replies [:)]

This thread was automatically locked due to age.

Parents

0 BarryG over 11 years ago

Hi, search for my posts about my i5-4670 system:
https://www.google.com/search?q=i5-4670+barryg+site%3Aastaro.org

and see my performance tests: https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/29110

I get just over 300mbps with a single iPerf on port 80 with the IPS running on the 9.2x beta.

Higher throughput should be possible with multiple clients as the IPS is multi-process.

For single-client or single-stream bandwidth, max GHz is critical.
For multi-stream, multiple cores help.

If you get a Xeon, try to get the most modern one available, e.g. a Haswell E3, preferably over 3GHz.

Stay away from the older Xeons with more cores; their clock speeds and IPC are much lower.

Good NICs are critical for 100+mbps performance; I've had good luck with Intel and Broadcom.
Make sure you're using PCIe and not PCI/PCIx.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 11 years ago

Hi, search for my posts about my i5-4670 system:
https://www.google.com/search?q=i5-4670+barryg+site%3Aastaro.org

and see my performance tests: https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/29110

I get just over 300mbps with a single iPerf on port 80 with the IPS running on the 9.2x beta.

Higher throughput should be possible with multiple clients as the IPS is multi-process.

For single-client or single-stream bandwidth, max GHz is critical.
For multi-stream, multiple cores help.

If you get a Xeon, try to get the most modern one available, e.g. a Haswell E3, preferably over 3GHz.

Stay away from the older Xeons with more cores; their clock speeds and IPC are much lower.

Good NICs are critical for 100+mbps performance; I've had good luck with Intel and Broadcom.
Make sure you're using PCIe and not PCI/PCIx.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data