Speedtests with or without IPS

Security Intrusion Prevention
1

I got a new router from my ISP to reach the new 1000/50 MBit/s speed.
Switching to Bridge mode was a bit ‘diificult’. But this is another story. :wink:

I checked the speed and got 100Mbit/s only.
Some further investigation showed

  • speedtest-cli with IPS : 100MBit
  • speedtest-cli without IPS: 400MBit
  • iperf3 with IPS: 100MBit
  • iperf3 wthout IPS: 950 MBit

All measurements are done from IPFire commandline.
Conclusion:

  • speedtest-cli doesn’t mmeasure exactly, iperf3 is preferable
  • IPS throttles down to 100MBit. Why?
2

Am I correct in remembering that you have an APU system. If yes, then that system is not capable of running at the full bandwidth with IPS running.
If I am remembering wrong, please provide info on which system you do have IPFire on.

I used to have the APU4 mini system and that maxed out at around 200MBit with the IPS running while my line capability was 1GBit.

I now have the new mini appliance and that runs at around 1GBit with the IPS enabled.

This performance effect is shown in the benchmarking that was done back with CU158 & CU159
https://www.ipfire.org/docs/devel/benchmarks#results

1 Like
3

Yes, you are right. I use an APU system.
Remains the factor 2 in speed measurement.

4

My measurement was not done via iperf3 or via fireperf, it was done via speedtest so it might well be too optimistic.

The fireperf based benchmark in that link gave
52/125 Mbit/s TX/RX with CU158
and
170/140 Mbit/s TX/RX (+118/+15) with CU159.

I think that is in the same magnitude as you are showing.

That benchmark is based on a 2019 mini appliance system ( APU4 I believe).

Also did you do the test with complete minimum/default setup as described in that benchmark link.

5

Because I was interested in real time performance, I did the tests against a speedtest server in the internet.
My results show commisioned speed with iperf3. This speed was measured by a Vodafone technician at my router (Fritz!Box), also.

6

Double-check that the green ECO mode 100 Mbit only LAN 4 Port on Fritz!box is not in use.

7

@flinx , welcome to the community.
And thanks for your advice. But this wasn’t/isn’t the problem. Internet is bridged to LAN2 and this interface runs at 1000MBit.

8

With IPS the APU boards won’t go above 100 Mbit/s in a speedtest.

Otherwise you should hit the 1000 Mbit/s.

It depends what you want to test. In a real-world situation you don’t want to run IPFire without the IPS.

1 Like
9

Means, with IPS I should look for a faster device.
A path we know from windows. :frowning: