On 18 Feb 2015 at 15:18, Gene wrote: > To expand on Alexander's point, look at the FAQ: > > http://www.openbsd.org/faq/pf/perf.html > > If you aren't doing a lot of filtering, just passing traffic over > multiple interfaces, more cores might be beneficial. > > -Eugene
Actually, at this time and the near future, "passing traffic" (i.e. the kernel network stack) happens entirely on CPU0. The network gurus *are* working on making the network layer multiprocessor capable, but my impression from watching the tech@ list is that this goal is still some ways off. At the present time, only userland applications can and do make use of the additional CPU cores. So to quote the old-timers on this list -- only the OP can determine the characterstics of the specific workload and firewall configuration. But unless that firewall includes many CPU-intensive proxies, it will most likely perform best with fewer yet faster cores. -Jacob. > > On Wed, Feb 18, 2015 at 2:50 PM, Alexander Salmin <alexan...@salmin.biz> > wrote: > > > I might start a flame now but the higher freq and less core model is > > the "better choice" unless your firewall will do other things than > > packetfiltering and routing. > > > > On 2015-02-18 22:30:31, ML mail wrote: > > > Hi, > > > > > > Stupid question but if you would have to choose between two > > > different > > Intel CPUs for an OpenBSD firewall using 4 to 6 Intel NICs with all > > /24 networks behind and around 50-60 Mbit/s average traffic would you > > rather choose the CPU with higher Frequency and less cores or for a > > CPU with lower frequency but more cores? > > > > > > For example: > > > > > > - E5-2630Lv3, 20M Cache, 1.80 GHz, 8 cores: > > http://ark.intel.com/products/83357/Intel-Xeon-Processor-E5-2630L-v3-2 > > 0M-Cache-1_80-GHz > > > - E5-2637v3, 15M Cache, 3.50 GHz, 4 cores: > > > > > http://ark.intel.com/products/83358/Intel-Xeon-Processor-E5-2637-v3-15 > > M-Cache-3_50-GHz > > > > > > Or asked differently, which are the importants criteria to look at > > > first > > for a CPU intended to be used in an OpenBSD firewall? > > > > > > Regards > > > ML
