[octaneirix6530]

[Shiunbird]

Legendary-Pro:~ shiunbird$ speedtest-cli
Retrieving speedtest.net configuration...
Retrieving speedtest.net server list...
Selecting best server based on ping...
Hosted by SWW Wunsiedel GmbH (Wunsiedel) [173.72 km]: 12.113 ms
Testing download speed................................................................................
Download: 159.37 Mbit/s
Testing upload speed................................................................................................
Upload: 6.38 Mbit/s

I nominally have 300/300 but I run a quite aggressive QoS policy on my router and run a few services at home, so bandwidth for workstations is limited.

[jan-jaap]

Code:

janjaap@z600:$ speedtest-cli
Retrieving speedtest.net configuration...
Testing from T-Mobile Thuis (###.###.###.###)...
Selecting best server based on ping...
Hosted by TriNed B.V. (Sint-Oedenrode) [31.25 km]: 7.031 ms
Testing download speed................................................................................
Download: 797.79 Mbit/s
Testing upload speed......................................................................................................
Upload: 727.05 Mbit/s

I have FTTH and a symmetrical gigabit connection, but pfSense on my router doesn't do multi-core NAT and a single core can do ~ 700MBit/s. With multiple parallel connections or something like aria2c I get the full gigabit both ways. I have a NUC8 which will replace the aging PC Engines APU2 router, but didn't have the time configure it.

This connection also serves up techpubs.jurassic.nl (among others).

NB: honestly, what's the point of a 10Gb/s internet connection? How do you consume data at that rate? The vast majority of sites are nowhere near capable of achieving that kind of speed. Before switching ~ 2 years ago, I had 100Mb/s FTTH for ~ 15 years, and the reason I switched had more to do with a desire to unbundle the internet, TV and phone subscriptions, not lack of speed. I would have settled for 200Mb/s, but 750Mb/s was literally €1 or €2 / month extra. Then when I switched to 1Gb/s my my monthly cost went down (same ISP).

[Shiunbird]

I have FTTH and a symmetrical gigabit connection, but pfSense on my router doesn't do multi-core NAT and a single core can do ~ 700MBit/s. With multiple parallel connections or something like aria2c I get the full gigabit both ways. I have a NUC8 which will replace the aging PC Engines APU2 router, but didn't have the time configure it.

This connection also serves up techpubs.jurassic.nl (among others).

I use an APU4C4 and the performance for me depends a lot on how many small packets are running through - snort saturates a single core.
It easily holds 300/300 if I'm not using torrents, for example.

For some time, I ran a virtualised pfSense box on top of FreeNAS and a dedicated NIC on a Xeon 1260L and it ran as good as the APU4C4, but I had to start it up manually every time I restarted my FreeNAS box.

Do you use snort? I think the newest version is multithreaded but I've heard there's no one to build the user UI on pfSense and migrating is not straightforward.

[jan-jaap]

Do you use snort? I think the newest version is multithreaded but I've heard there's no one to build the user UI on pfSense and migrating is not straightforward.

No snort on the pfsense box, just packet switching and some DNS based ad blocking. The webserver is another system.

I don't want to put time into the existing setup anymore other than security updates, because I intend to virtualize the whole setup. The current webserver system is a 10 year old Jetway with an Intel Atom N2600 CPU and Linux support for the embedded graphics is extremely sketchy which makes system upgrades a pain in the %%%. It's SSD is also on the way out (relocations exhausted)

The new setup will be using ESXi on a NUC 8 with quad core i5 CPU, 64GB RAM and 1TB NVME SSD. Only dual ethernet ports on a NUC (while avoiding USB dongles and power hungry "gaming" NUCs) requires an interesting hack: an Apple Thunderbolt gigabit dongle + Apple TB2->TB3 adapter. Anyway, that should have enough grunt to run additional applications and security measures. I'm just a little uneasy to load so much critical infrastructure on a single system, so I may buy a second one to have some redundancy.

I have some ideas about infrastructure-as-code, discardable / immutable VMs etc, and this will be my testbed for that. So I'm taking my time.

[Shiunbird]

I don't mean to hijack the thread, but I actually built a fanless setup (Xeon 1260L) with passive cooled PSUs and I modified 2 chassis from xrack pc.
They are 4 core 8 thread parts and 32GB of ECC RAM.

I have a partially assembled second box, just missing the mobo and another 4 port 1 gig-nic (enough for my 300/300 connection), all from used parts. The main box has 5 spinning disks that I intend to upgrade to 8 SSDs and ZFS.

Another switch and I will be fully redundant with no fan noise and at a very low cost, and I managed to make things fit in the living room (I live in an apartment) and earn a seal of aesthetic approval from my girlfriend.

For the VMs, I wrote some scripts to manage images and restore services (such as DBs) in case of need. They are already tested and, once my second box is fully up, I will be able to move VMs and services from one box to the other.

[shrek]

82 down/40 up. Not terrible for American internet.

[Raion]

Shitty Hotspot speed

[jebmayers]

I must confess I share Jan-jaap's sentiments questioning the point of 10Gb internet. The upstream data rate is more relevant to me than the downstream.

Also I have no desire to replace my internal 1Gb network infrastructure with still expensive 10Gb gear just yet, so for me it would be a complete waste.