build your own passthrough device capable of PIA openVPN AES 256 SHA 256 RSA-4096

[BirdDad]

I am going to have a 150Mbps cable connection.

 

[sdifox]

I am going to have a 150Mbps cable connection.

what is your current computer spec and what do you do on it?


Also, what is your upload speed, the 150 is down.

 

[dave_the_nerd]

This is, like, a "quantity" vs. "quality" problem wrt security.

 

[mxnerd]

I don't see how identity theft has anything to do with internet speed.

 

[sdifox]

I don't see how identity theft has anything to do with internet speed.

he is trying to figure out the hardware muscle he needs to do seamless encryption.

 

[Engineer]

he is trying to figure out the hardware muscle he needs to do seamless encryption.

Based on the AES-NI testing chart, the J1900 can pump over 250Mbps even AES 256 without the AES-NI instruction set. Of course, future bumps to 1Gbps would be capped at that rate.

Still kicking myself for missing the $34.99 FRY's deal (by 5 minutes) for the AMD 5350 and MSI board that would have done AES-NI and probably run at around 20 Watts or less.

 

[sdifox]

Based on the AES-NI testing chart, the J1900 can pump over 250Mbps even AES 256 without the AES-NI instruction set. Of course, future bumps to 1Gbps would be capped at that rate.

Still kicking myself for missing the $34.99 FRY's deal (by 5 minutes) for the AMD 5350 and MSI board that would have done AES-NI and probably run at around 20 Watts or less.

so tell him that, not me

 

[Engineer]

so tell him that, not me

I did! (just indirectly)....

I also posted the AMD 5150 deal for $39.99 AR including MSI ITX board (dead now). That board would have pumped over 1Gbps with AES-NI and had an 8X PCIe slot for expansion (probably could have went to 10Gbps NIC's but don't think the CPU would have went that high - encrypted or not).

Edit: Damnit, I keep forgetting that OpenVPN isn't compatible with AES-NI yet but it's coming. Still need that, IMO, for the future.

 

[sdifox]

I did! (just indirectly)....

I also posted the AMD 5150 deal for $39.99 AR including MSI ITX board (dead now). That board would have pumped over 1Gbps with AES-NI and had an 8X PCIe slot for expansion (probably could have went to 10Gbps NIC's but don't think the CPU would have went that high - encrypted or not).

Edit: Damnit, I keep forgetting that OpenVPN isn't compatible with AES-NI yet but it's coming. Still need that, IMO, for the future.

Dual Xeon L5640 here :whiste:

 

[mxnerd]

After Snowden incident, U.S. people are paranoid then ever, including my mom, who can't even start a PC.

 

[Engineer]

Dual Xeon L5640 here :whiste:

https://youtu.be/WJhHNSQZZhk?t=30

:biggrin:

 

[BirdDad]

he is trying to figure out the hardware muscle he needs to do seamless encryption.

correct you are!
Right now I am trying to figure out if the Sempron 3850 would be enough to do it.
My rules are this:
1 must be able to do AES256,SHA256,RSA4096 all at the same time at at least 150Mbps in real time-no noticeable lag
2 must not overheat or be overexerted in any way while performing this task
3 must have a small form factor
4 must be able to go 24/7/365 constant
5 must be able to use very long password of 64 characters in the openVPN password place

 

[sdifox]

https://youtu.be/WJhHNSQZZhk?t=30

:biggrin:

L is for low power duh

Remember my pfsense is just one of the vms hosted on the poweredge R710 :awe:

 

[Engineer]

L is for low power duh

Remember my pfsense is just one of the vms hosted on the poweredge R710 :awe:

LOL!

Dual processors (so 12 cores and 24 thread)? http://ark.intel.com/products/47926/Intel-Xeon-Processor-L5640-12M-Cache-2_26-GHz-5_86-GTs-Intel-QPI

D:

I could see using a VM for that kind of stuff if I needed other things running too. I assume that pfsense runs well in a VM environment?

I don't need to host other VM's. Besides, I'm trying for a very small case (at least by my standards) using the Antec ISK-110 case. I could go smaller but I think I would have to buy a pre-built unit for that and I wanted to do the building. I'm also trying to push this down to 10W or lower.

As for BirdDad, I answered part of the questions about this project in the CPU forum (where he asked about AES instructions in CPU's).

 

[rchunter]

If I felt the need to run everything through a vpn I would just do like fox does and run it as a vm on my file server (e3-1246v3). But beings how I live in BFE I will never have fast internet anyway. Hell a 400mhz router will take care of my openvpn needs. lol.

 

[BirdDad]

Thank you all for the replies.
The Celeron looks a lot better pricewise= http://www.newegg.com/Product/Product.aspx?Item=N82E16813157620&cm_re=N3150-_-13-157-620-_-Product
for 69$ for both it and motherboard $59 after rebate
an Inwin case http://www.newegg.com/Product/Product.aspx?Item=N82E16811108196
all for about 120$
if only I knew how well it performed

 

[sdifox]

LOL!

Dual processors (so 12 cores and 24 thread)? http://ark.intel.com/products/47926/Intel-Xeon-Processor-L5640-12M-Cache-2_26-GHz-5_86-GTs-Intel-QPI

D:

I could see using a VM for that kind of stuff if I needed other things running too. I assume that pfsense runs well in a VM environment?

I don't need to host other VM's. Besides, I'm trying for a very small case (at least by my standards) using the Antec ISK-110 case. I could go smaller but I think I would have to buy a pre-built unit for that and I wanted to do the building. I'm also trying to push this down to 10W or lower.

As for BirdDad, I answered part of the questions about this project in the CPU forum (where he asked about AES instructions in CPU's).

It's my 2012 datacenter lulz hosting plex, pfsense, a win 10, and varius ubutu.
Thing is I only paid 640 for the R710 with 4GBx6 RDIMM. Cheaper than it would have cost me to get an i7 system together.

 

[BirdDad]

that and this http://www.amazon.com/gp/product/B0...rue&ref_=ox_sc_act_title_1&smid=ATVPDKIKX0DER
for second NIC
@ 6Watts it is much better than the Sempron that I was looking at
Does anyone have one of these Celerons? I would value their opinion.
Let me know if I am missing anything-I have memory already.
Thanks

 

[sdifox]

Get intel chip nic.

 

[mxnerd]

@OP

Get intel chip nic.

+1

Intel is always supported in any platform, Windows, Linux, OS X, or any bare metal virtual environment.

Realtek support in Windows is OK, but a bit spotty in Linux.

The TP-Link card uses a Realtek chip and have reports not supported in pfSense.

http://lists.freebsd.org/pipermail/freebsd-bugs/2014-June/056664.html

Spend a little more saves you tons of headache down the road.

======

If you run pfSense in a VM then no problem. Since pfSense VM will emulate virtual adapter as an Intel or AMD NIC (in VMware).

 

[BirdDad]

thanks for the advise
I am looking at http://www.amazon.com/Intel-PWLA849...1-1&keywords=intel+nic+pci-e+dual+low+profile
is this what I should get? the motherboard onboard NIC is a realtek
BTW I am having trouble getting pfsense to run in VirtualBox it says CPU does not support long mode, I am unsure of what this means?

 

[sdifox]

thanks for the advise
I am looking at http://www.amazon.com/Intel-PWLA849...1-1&keywords=intel+nic+pci-e+dual+low+profile
is this what I should get? the motherboard onboard NIC is a realtek
BTW I am having trouble getting pfsense to run in VirtualBox it says CPU does not support long mode, I am unsure of what this means?

Which cpu?

 

[mxnerd]

thanks for the advise
I am looking at http://www.amazon.com/Intel-PWLA849...1-1&keywords=intel+nic+pci-e+dual+low+profile

That's very, very old PCI-X standard. It won't fit on PCIE slot even if you cut it open.

Regarding onboard Realtek, I have no idea. Many time you have to test in order to know. There are just too many variants.

=========

single port

http://www.newegg.com/Product/Produ...106033&cm_re=intel_nic-_-33-106-033-_-Product

dual port in post #72

http://forums.anandtech.com/showpost.php?p=37713166&postcount=72

 

[BirdDad]

how about
http://www.amazon.com/Intel-1000-Du...1-2&keywords=intel+nic+pci-e+dual+low+profile
?

 

[sdifox]

how about
http://www.amazon.com/Intel-1000-Du...1-2&keywords=intel+nic+pci-e+dual+low+profile
?

this should do

https://www.amazon.com/dp/B000BMZHX2/ref=cm_sw_r_awd_KSEawbDA9WBR9