Hello,
I have installed ipfire on my apu2c4 yesterday. I was using pfsense before, but recenlty upgraded my connection to 1 gigabit and wanted to be able to utilize it in full.
Unfortunately, I can’t go over 350-400Mbps on download. For upload it using all of 500Mbps. I also noticed, when I run a speed test, while it tests download, ipfire is using just one CPU core (at 100%). When it’s testing upload, the load is spread over 4 available cores.
Is there anything I have to setup more to have it working correctly?
At my synthetic tests (between 2 local networks) an apu2b4 has reached 921Mbit / 520Mbit at the same time. (bidirectional routing test)
Im not sure if you can optimize much. Maybee disabling sone features like “Generic Recieve Offload” may help. Often this features take load from server programs but they are a bad idea on routing machines.
same machine, similar numbers. If I connect my laptop directly to the gateway of the provider I have 800 mbit, the pcengines speedtest-cli drops to about 300 mbit upload and download. CPU 20%
Ah all the unitymedia/vodafone users here . I don’t wonder about that values. With a A4-5050, which is actually the same CPU architecture, but with 1,4GHz, I’ve been at 80% with 120MBits (but Realtek NIC). I also upgraded WAN to 1GBits + hardware.
I have also used dhcp at my tests. (I have asked to rule out PPPoE encapsulation)
Im not sure what happens here. Simple routing (without IPS, QoS or Proxy) should not need so much CPU.
I see only about 20% of CPU (based on IPFire CPU graph) while using speedtest-cli, however I still have half of the bandwidth. I have a static connection.
But I think this will be the case with single connections only. With multiple connections it’s using different cores. You may try download managers that are capable to establish multiple connections just as torrent (for testing purpose). But for sure that won’t solve the problem for regular usage.
I think you are right. I opened two terminals and started in parallel 2 consoles launching speedtest-cli, the speed remained the same for both and the CPU went to 50%
In my case dropping this rule is enough to get a 3x increase in routing throughput: iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu