Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
   Glossary   Glossary
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: [1] 2 3

Author Topic: PC Engines APU2E4 and pfSense  (Read 4893 times)

PhilipD

  • Reg Member
  • ***
  • Posts: 591
PC Engines APU2E4 and pfSense
« on: April 02, 2020, 12:17:51 PM »

Hi

To keep me occupied with a little project and to have a back up router I've just built a new router using PC Engines APU2E4 and their case.  The current one I am using is based on a Supermicro X11SBA with embedded Intel processor at 1.6GHz 4 core, so I was a bit concerned about the performance using the APU with a 1GHz AMD SoC, although with the latest firmware it now boosts to 1.4GHz, but was just wanting something as a back up.  The beauty with pfSense is the configuration can easily be downloaded and uploaded to another router that also has pfSense even if the hardware is completely different.

So far very impressed and quite a neat and small device.  It is coping absolutely fine on my FTTP line at 300Mbps, I'm getting full line speed and no sign of it struggling.

The Supermicro board X11SBA is drawing about 11-12 watts of power at idle, with about 4 watts of that being the management chip which I don't really need and unfortunately can't be turned off.  In contrast the APU with the latest bios is idling at around 4 watts and barely reaches 8 watts when under load, so saving about £11.00 of electricity a year.  So I'm using it as my main router now.

Hopefully in the future they update these boards with a faster SoC.

Regards

Phil



PC Engines





Logged

burakkucat

  • Respected
  • Senior Kitizen
  • *
  • Posts: 38300
  • Over the Rainbow Bridge
    • The ELRepo Project
Re: PC Engines APU2E4 and pfSense
« Reply #1 on: April 02, 2020, 07:59:20 PM »

Interesting. Thank you for telling us about your project.  :)
Logged
:cat:  100% Linux and, previously, Unix. Co-founder of the ELRepo Project.

Please consider making a donation to support the running of this site.

Chunkers

  • Reg Member
  • ***
  • Posts: 525
  • Brick Wall head-banger
Re: PC Engines APU2E4 and pfSense
« Reply #2 on: April 06, 2020, 12:46:07 PM »

Great choice, I also have an older version (APU2C4) which has been managing my dual-WAN connection for over 3 years now - I notice there is now a 4 LAN version.  Mine has been great and, as you say, is very low power consumption, it has the same Jaguar processor you have.

My only concern is that in the (very) unlikely event of me ever getting access to a fibre connection it won't be able to manage the throughput but as I live in the boonies its never likely to be an issue  :no:

Only annoying thing about mine is lack of VGA / video out means you are forced to use SSH or serial connection on set-up.

C
Logged

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: PC Engines APU2E4 and pfSense
« Reply #3 on: April 06, 2020, 05:46:33 PM »

Hi

The APU units can go up to a good speed, the main issue seems to be PPPoE that we tend to use in the UK only runs on one thread under pfSense/FreeBSD so only one processor core is used creating a bottleneck which shows up on single threaded downloads.  Certainly no issues seen here with a 300Meg connection.  Also it might be in time the issue with PPPoE on just one thread is fixed in FreeBSD.

The lack of the VGA is possibly a helper to lower power consumption and maybe the freeing up some memory and processor cycles (assuming it is disabled or left out completely in the version of the SoC used), and I guess is a cheaper as well. 

The beauty of course with pfSense is if you need to then you can upgrade the hardware and just transfer across your configuration, or start configuring from scratch without having to learn a new user interface.  :graduate:

I just hope PC Engine's come out with an upgraded processor but keeping the same form factor, otherwise they will lose sales as people will need more capable hardware.

Regards

Phil
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5261
    • Thinkbroadband Quality Monitors
Re: PC Engines APU2E4 and pfSense
« Reply #4 on: April 06, 2020, 05:55:41 PM »

Hi

The APU units can go up to a good speed, the main issue seems to be PPPoE that we tend to use in the UK only runs on one thread under pfSense/FreeBSD so only one processor core is used creating a bottleneck which shows up on single threaded downloads.  Certainly no issues seen here with a 300Meg connection.  Also it might be in time the issue with PPPoE on just one thread is fixed in FreeBSD.

Well they did eventually multi-thread packet filtering, apparently that used to be single-threaded too for a LONG time.

Being FreeBSD, I expect PPP to go multi-threaded, round about the time every ISP stops using PPP.  :lol:  Then again I would have expected them to ditch PPP years ago, but still it lives on.

The lack of the VGA is possibly a helper to lower power consumption and maybe the freeing up some memory and processor cycles (assuming it is disabled or left out completely in the version of the SoC used), and I guess is a cheaper as well. 

It may save a watt or two but I don't think its likely to save them more than a few $$ to buy.

The beauty of course with pfSense is if you need to then you can upgrade the hardware and just transfer across your configuration, or start configuring from scratch without having to learn a new user interface.  :graduate:

I thought that was a big no no because pfSense throws a fit if interfaces are missing on boot?

I just hope PC Engine's come out with an upgraded processor but keeping the same form factor, otherwise they will lose sales as people will need more capable hardware.

Regards

Phil

For starters, switching to M.2 sockets is essential for modern WiFi chips.  Not that any of those work on pfSense  ::) but there's always OpenWRT.
« Last Edit: April 06, 2020, 06:05:16 PM by Alex Atkin UK »
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: PC Engines APU2E4 and pfSense
« Reply #5 on: April 06, 2020, 07:14:30 PM »


It may save a watt or two but I don't think its likely to save them more than a few $$ to buy.


When you make enough of something a few dollars makes a big difference.

Quote
I thought that was a big no no because pfSense throws a fit if interfaces are missing on boot?

Not sure what it might have done in the past but I used the config from a 4 LAN pfSense box to the APU with 3 and it just took me to the interface screen on first logging in to confirm the change.  No drama.

Quote
For starters, switching to M.2 sockets is essential for modern WiFi chips.  Not that any of those work on pfSense  ::) but there's always OpenWRT.

pfSense and these types of board are not really meant for Wi-Fi.  It isn't aimed at being a one box solution. Most people who go to the trouble of pfSense will have a "proper" home or business network with separate switch and a separate access point.

Regards

Phil

Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5261
    • Thinkbroadband Quality Monitors
Re: PC Engines APU2E4 and pfSense
« Reply #6 on: April 07, 2020, 12:38:40 AM »

When you make enough of something a few dollars makes a big difference.

Yeah for the manufacturer as obviously it saves a few dollars on the chip, the related PCB space and VGA port itself.  I was meaning more than from an end-user point of view, its a pretty insignificant difference in price.

Not sure what it might have done in the past but I used the config from a 4 LAN pfSense box to the APU with 3 and it just took me to the interface screen on first logging in to confirm the change.  No drama.

When I tried booting with an interface missing, it wouldn't respond to the LAN as the console was sat on the "please assign an interface to the LAN" page.  I've also seen it mentioned on forums that this is common and why you can't really use removable interfaces (eg a tethered phone) as pfSense will fail to come back up during a reboot as the phone turns off tethering when USB is disconnected.

pfSense and these types of board are not really meant for Wi-Fi.  It isn't aimed at being a one box solution. Most people who go to the trouble of pfSense will have a "proper" home or business network with separate switch and a separate access point.

Granted, but those slots are intended for WiFi modules when using an OS that CAN support it.

I actually use WiFi on my pfSense box as I found 802.11g is perfect for low-bandwidth IoT devices.  They are WAY more responsive/reliable than when connected to my nanoHD.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: PC Engines APU2E4 and pfSense
« Reply #7 on: April 07, 2020, 09:43:31 AM »

Hi

Yeah for the manufacturer as obviously it saves a few dollars on the chip, the related PCB space and VGA port itself.  I was meaning more than from an end-user point of view, its a pretty insignificant difference in price.

It might be insignificant for us buying just one to last a few years, but these boards were also used for some time by Netgate themselves, and some firms buy these boards in the dozens or hundreds and ship them off to all their regional offices. Also if there was a VGA connector on board the board size would need to be bigger and the cases would need to be bigger, adding more cost. Also these are meant to be routers or network appliances which don't typically have VGA ports.  If you want a small PC motherboard that has a VGA port then there are plenty of other and more powerful options, this one wouldn't be what you look at to buy.  Also most router software, certainly for pfSense, they just show a text interface, that looks pretty much the same via a serial port as it does via VGA.

Quote
When I tried booting with an interface missing, it wouldn't respond to the LAN as the console was sat on the "please assign an interface to the LAN" page.  I've also seen it mentioned on forums that this is common and why you can't really use removable interfaces (eg a tethered phone) as pfSense will fail to come back up during a reboot as the phone turns off tethering when USB is disconnected.

In which case you just attach a serial cable and do what you need to do.  ;D

Quote
Granted, but those slots are intended for WiFi modules when using an OS that CAN support it.

And the slots support Wi-Fi and are mini PCI Express, not sure what the issue is.

Quote
I actually use WiFi on my pfSense box as I found 802.11g is perfect for low-bandwidth IoT devices.  They are WAY more responsive/reliable than when connected to my nanoHD.

So shows it works :-)

It is quite easy to come up with a list of issues or negatives with this system or any system for that matter, you can always find faster, better and often more expensive with a higher power draw. It isn't perfect and there is always better and I'd love to see a newer more powerful version. 

Regards

Phil
Logged

Chunkers

  • Reg Member
  • ***
  • Posts: 525
  • Brick Wall head-banger
Re: PC Engines APU2E4 and pfSense
« Reply #8 on: April 08, 2020, 11:28:27 AM »


pfSense and these types of board are not really meant for Wi-Fi.  It isn't aimed at being a one box solution. Most people who go to the trouble of pfSense will have a "proper" home or business network with separate switch and a separate access point.


I agree with the above, but it is unfortunate, I feel like it is very limiting and preventing more widespread distribution and use of pfSense / OPNsense which I think are great. 

I can understand for ergonomic and convenience reasons why people buy 'one box' but I think its gone silly, people want their routers to be about 8 devices (router, modem, NAS, firewall, media server etc etc). 

I do agree FreeBSD support for peripherals is rubbish btw, so when I do upgrade I am going to have to take a look at Zeroshell, IPFire and VyOS as it would be nice to have options.
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5261
    • Thinkbroadband Quality Monitors
Re: PC Engines APU2E4 and pfSense
« Reply #9 on: April 08, 2020, 12:24:17 PM »

I do agree FreeBSD support for peripherals is rubbish btw, so when I do upgrade I am going to have to take a look at Zeroshell, IPFire and VyOS as it would be nice to have options.

Another thing is power management.  Even with PowerD set to minimum on pfSense on Atom I was using when I moved from OpenWRT, it used about 33% more watts than OpenWRT when idle.  But FreeBSD packet processing is much faster than Linux, it literally felt like I'd upgraded my broadband as web pages loaded noticeably faster.

For that reason alone I'm sticking with pfSense.

To be fair, even OpenWRT is a PITA trying to get good WiFi performance.  The cards might work, but not nearly as well as a dedicated AP.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

hushcoden

  • Reg Member
  • ***
  • Posts: 429
Re: PC Engines APU2E4 and pfSense
« Reply #10 on: April 10, 2020, 06:38:04 PM »

@PhilipD I was searching for some pre-configured kit (I'm not able to do assembly it myself  :baby: ) and this one looks the one you described, is that correct ?

And can you configure the ports to be independent i.e. not switched in order to assign to each port a different subnet, e.e. port 1 = 192.168.1.0/24 / port 2 = 192.168.2.0/24 etc. ?
« Last Edit: April 10, 2020, 08:05:58 PM by hushcoden »
Logged

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: PC Engines APU2E4 and pfSense
« Reply #11 on: April 10, 2020, 09:38:42 PM »

Hi

Yes that's the exact same one but preconfigured and prebuilt. I also ordered from them.

Regards

Phil
Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5261
    • Thinkbroadband Quality Monitors
Re: PC Engines APU2E4 and pfSense
« Reply #12 on: April 10, 2020, 10:15:37 PM »

That's the company I got the nanoHD from, they also sell some of their products via Amazon which strangely sometimes is slightly cheaper than using their own website.

I've been using them off and on for years, they seem pretty good.

My god, 1Ghz Jaguar cores, definitely not for VPN use then.  ;)  I think that's the only reason I never got one, the CPU is just too weak to be future proof.  It might handle 300Mbit without anything fancy, but start messing with QoS and VPNs, no way its gonna cope.

I went with https://amzn.to/3b1HwZf and I'm still not convinced its going to cope once I go Gigabit.  Though granted, this CPU runs HOT when it turbos under heavy load, but that's mostly only directly after changing the configuration.  Plus I think they used heatpads to connect to the passively cooled case, replacing with paste would probably make a huge difference.
« Last Edit: April 10, 2020, 10:35:54 PM by Alex Atkin UK »
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors

PhilipD

  • Reg Member
  • ***
  • Posts: 591
Re: PC Engines APU2E4 and pfSense
« Reply #13 on: April 11, 2020, 10:38:14 AM »

My god, 1Ghz Jaguar cores, definitely not for VPN use then.  ;)  I think that's the only reason I never got one, the CPU is just too weak to be future proof.  It might handle 300Mbit without anything fancy, but start messing with QoS and VPNs, no way its gonna cope.

I'm using various firewall rules plus QoS along with IPv6 as well as 4 and it still works at full line speed of 300.  VPN speeds are around 50Mbps which is more than ample for the rare time I need it to get onto my home network when out and about.

Of course you can get faster kit, no one is saying here that an AMD Jaguar running at up to 1.4GHz is beating everything else. 

The kit you linked to should be fine for 1Gbps.

Not everyone wants or needs 1Gbps broadband, I don't think I'm going to bother upgrading to 1Gbps FTTP for a while yet as I don't need it, and when I do there will be better kit around by then anyway so no point in buying something over specified for what I need now to never take advantage of just to end up replacing it again later.

Regards

Phil



Logged

Alex Atkin UK

  • Addicted Kitizen
  • *****
  • Posts: 5261
    • Thinkbroadband Quality Monitors
Re: PC Engines APU2E4 and pfSense
« Reply #14 on: April 12, 2020, 04:40:27 AM »

Yeah fair enough not everyone is after my use case, it just kinda sucked that there was no reputable brand making anything that scaled to my plans.

It took months for that appliance to arrive as I think it was built on demand in China, but then it was the cheapest for those specifications so fair enough really.
Logged
Broadband: Zen Full Fibre 900 + Three 5G Routers: pfSense (Intel N100) + Huawei CPE Pro 2 H122-373 WiFi: Zyxel NWA210AX
Switches: Netgear MS510TXUP, Netgear MS510TXPP, Netgear GS110EMX My Broadband History & Ping Monitors
Pages: [1] 2 3