{"id":14135,"date":"2019-04-14T10:02:34","date_gmt":"2019-04-14T10:02:34","guid":{"rendered":"https:\/\/www.firewallhardware.it\/dimensionare-hardware-pfsense\/"},"modified":"2022-02-15T15:46:40","modified_gmt":"2022-02-15T15:46:40","slug":"how-to-size-a-firewall","status":"publish","type":"post","link":"https:\/\/blog.miniserver.it\/en\/firewall\/how-to-size-a-firewall\/","title":{"rendered":"How to size a firewall"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1123.2px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-1\"><p>This article was written mainly for pfSense \u00a0and OPNsense, but it can also be used for ipFire.<\/p>\n<p>\u2192 Check out <a href=\"https:\/\/blog.miniserver.it\/en\/pfsense\/pfsense-vs-opnsense-technical-comparison\/\">pfSense vs OPNsense: technical comparison\u00a0<\/a><\/p>\n<h2>Steps to resize a firewall<\/h2>\n<ol>\n<li>Introduction<\/li>\n<li>Required throughput<br \/>\n2.1 CPU type<br \/>\n2.2 Minimum requirements for pfSense up to 2.4.x<br \/>\n2.3 Minimum requirements for pfSense CE version 2.5.x<br \/>\n2.4 Throughput based sizing<br \/>\n2.5 Cluster Throughput based sizing<\/li>\n<li><\/li>\n<\/ol>\n<h3>1. Introduction<\/h3>\n<p>To size a \u00a0firewall based on pfSense CE\/OPNsense from 2.4.X \/ 18.X and up, keep in mind\u00a0 these 3 main factors:<\/p>\n<ul>\n<li>Required throughput<\/li>\n<li>Features or additional packages of pfSense\/OPNsense used<\/li>\n<li>Number and type of NIC (Network Interface Card) required<\/li>\n<\/ul>\n<p>These 3 factors mainly affect RAM, CPU, mass memory and NIC quantities.<\/p>\n<p>Also keep in mind that from version 2.4 pfSense does not support systems on CF anymore (in particular it no longer supports i386 images), which OPNsense still supports them.<\/p>\n<h3>2. Required throughput<\/h3>\n<p>By definition, throughput of a communication channel is meant its transmission capacity actually used.<\/p>\n<p>Throughput is not to be confused with link capacity. Both capacity and throughput are expressed in bit \/ s, but while the first expresses the maximum transmission frequency at which data can travel, throughput is an index of the actual use of the link capacity. Throughput is the amount of data transmitted in a unit of time and depends exclusively on how much information is entered on the transmission channel.<\/p>\n<p>Before considering throughput considerations, we need to consider the fact that both pfSense and OPNsense can operate both as a firewall and as a router or both. It will therefore be necessary to consider the overall throughput of the system we want to achieve for the choice of the apparatus.<\/p>\n<p>For example, if we need to build a firewall, we can consider the sum of the WAN throughputs as throughput.<\/p>\n<p>If instead we have to create a Router that joins networks together we have to sum up the throughput of all the interfaces, both WAN and LAN.<\/p>\n<h3>2.1 CPU type<\/h3>\n<p>It is important to determine the throughput of a network before installing a pfSense\/OPNsense firewall \/ router as it determines the type of CPU to use and in some cases the type of NIC.<\/p>\n<p>If less than 10 Mbps are required then the minimum hardware requirements can be used. For higher throughputs we strongly advise you to follow the sizing suggested by the following table, based on tests actually performed in the field. The table below is designed to avoid reaching the maximum level of hardware load, so as not to run into problems.<\/p>\n<p>If for example I have to build a Router or a Firewall with 10 Gbit ports, I won&#8217;t be able to use a less powerful CPU than a Quad Core XEON. In fact, when the NICs reach 10 Gbit of traffic the Core of the appliance goes to 100% and the machine goes into crisis.<\/p>\n<p>For these uses we recommend <a href=\"https:\/\/www.miniserver.store\/virtual-appliance-a2-server\" target=\"_blank\" rel=\"noopener\">A2-Server<\/a> o <a href=\"https:\/\/www.miniserver.store\/virtual-appliance-a3-server\" target=\"_blank\" rel=\"noopener\">A3 Server.<\/a><\/p>\n<p>It should be noted that the pfSense development team has announced that as of version 2.5 it will NOT BE MORE POSSIBLE to install and even less to update the versions of pfSense on hardware without CPUs with AES-IN instructions. The reason (always declared by pfSense) is that to support the increase in CPU loads resulting from cryptography it was necessary to use the set of AES-NI instructions that are used to optimize encryption and decryption algorithms on certain processors Intel and AMD.<\/p>\n<p>This does not concern the OPNsense developers who declare that the execution of the AES-IN instructions can be done either via hardware (with CPUs having AES-IN instructions) or via software, as is the case with current versions of both distributions without any particular problems.<\/p>\n<h3>2.2 Minimum requirements for pfSense up to 2.4.x<\/h3>\n<table>\n<tbody>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc;\">CPU<\/td>\n<td style=\"border-top: 1px solid #cccccc; border-left: 1px solid #cccccc;\">Not less than 1GHz<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc;\">RAM<\/td>\n<td style=\"width: 386.133px; border-top: 1px solid #cccccc; border-left: 1px solid #cccccc;\">1 GB<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc;\">Installation su Hard Disk<\/td>\n<td style=\"width: 386.133px; border-top: 1px solid #cccccc; border-left: 1px solid #cccccc;\">16 GB<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc; border-bottom: 1px solid #cccccc;\">Embedded<\/td>\n<td style=\"width: 386.133px; border-top: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-left: 1px solid #cccccc;\">CF not supported<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>2.3 Minimum requirements for pfSense CE version 2.5.X<\/h3>\n<table>\n<tbody>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc;\">CPU<\/td>\n<td style=\"border-top: 1px solid #cccccc; border-left: 1px solid #cccccc;\">Not less than 1 GHz, CPU with AES-IN<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc;\">RAM<\/td>\n<td style=\"width: 386.133px; border-top: 1px solid #cccccc; border-left: 1px solid #cccccc;\">1 GB<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc;\">Installation on Hard Disk<\/td>\n<td style=\"width: 386.133px; border-top: 1px solid #cccccc; border-left: 1px solid #cccccc;\">16 GB<\/td>\n<\/tr>\n<tr>\n<td style=\"width: 417.867px; border-top: 1px solid #cccccc; border-bottom: 1px solid #cccccc;\">Embedded<\/td>\n<td style=\"width: 386.133px; border-top: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-left: 1px solid #cccccc;\">CF not supported<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>2.4 Throughput based sizing<\/h3>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"border-top: 1px solid #cccccc; background: #00a0df;\">\n<td><strong><span style=\"color: #ffffff;\">Throughput:<\/span><\/strong><br \/>\n<strong><span style=\"color: #ffffff;\">Mbps<\/span><\/strong><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Suggested hardware requirements<br \/>\n<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Suggested product<br \/>\n<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Noisiness<\/strong><\/span><\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>1-20 Mbps<\/td>\n<td>Not less than 1000 MHz CPU Single Core<\/td>\n<td>FIREWALL ENTRY LEVEL<br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/entry-level\/firewall-entry-level-2-nic-apu2-based-2gb-ram\" target=\"_blank\" rel=\"noopener\">APU2 Entry Level<\/a><\/td>\n<td>None<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>10-100 Mbps<\/td>\n<td>Not less than 2.4 GHz CPU Quad Core<\/td>\n<td>FIREWALL CORPORATE<br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/compact-small-utm-3\" target=\"_blank\" rel=\"noopener\"><u>Compact Small UTM 3<\/u><\/a><br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/appliance-small-utm-3\" target=\"_blank\" rel=\"noopener\"><u>Appliance Small UTM 3<\/u><\/a><\/td>\n<td>None<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>50-650 Mbps<\/td>\n<td>Not less than 2.4 GHz CPU Octa Core<\/td>\n<td>FIREWALL CORPORATE \/ FIREWALL DATACENTER<br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/datacenter\/appliance-a1-server-aluminum\" target=\"_blank\" rel=\"noopener\">A1-Server<\/a> &#8211; <a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM<\/a><\/td>\n<td>Almost nothing (*)<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>450 &#8211; 1000 Mbps<\/td>\n<td>Not less than 3,5 GHz Quad Core<\/td>\n<td>FIREWALL DATACENTER<br \/>\n<a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM <\/a>&#8211; <a href=\"https:\/\/www.miniserver.store\/appliance-a2-server-aluminum\" target=\"_blank\" rel=\"noopener\">A2-Server<\/a><\/td>\n<td>Medium (*)<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc; border-bottom: 1px solid #ccc;\">\n<td>Up to 10 Gbps<\/td>\n<td>Not less than 3,5 GHz Xeon Quad\/Octa Core<\/td>\n<td>FIREWALL DATACENTER<br \/>\n<a href=\"https:\/\/www.miniserver.store\/appliance-a2-server-aluminum\" target=\"_blank\" rel=\"noopener\">A2-Server <\/a>&#8211; <a href=\"https:\/\/www.miniserver.store\/appliance-a3-server-aluminum\" target=\"_blank\" rel=\"noopener\">A3-Server<\/a><\/td>\n<td>Medium (*)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>2.5 Cluster Throughput based sizing<\/h3>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"border-top: 1px solid #cccccc; background: #00a0df;\">\n<td><span style=\"color: #ffffff;\"><strong>Throughput:<\/strong><\/span><br \/>\n<span style=\"color: #ffffff;\"><strong>Mbps<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Suggested hardware requirements<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Suggested product<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Noisiness<\/strong><\/span><\/td>\n<\/tr>\n<tr>\n<td>1-20 Mbps<\/td>\n<td>Not less than 1000 MHz CPU Single Core<\/td>\n<td>FIREWALL ENTRY LEVEL<br \/>\n<a href=\"https:\/\/www.miniserver.store\/nano-cluster-apu2e-2gb\" target=\"_blank\" rel=\"noopener\">Nano Cluster APU2<\/a><\/td>\n<td>None<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>10-100 Mbps<\/td>\n<td>Not less than 2.4 GHz CPU Quad Core<\/td>\n<td>FIREWALL CORPORATE<br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/compact-small-utm-3\" target=\"_blank\" rel=\"noopener\"><u>Compact Small UTM 3<\/u><\/a><br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/appliance-small-utm-3\" target=\"_blank\" rel=\"noopener\"><u>Appliance Small UTM 3<\/u><\/a><\/td>\n<td>None<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>50-650 Mbps<\/td>\n<td>Not less than 2.4 GHz CPU Octa Core<\/td>\n<td>FIREWALL CORPORATE \/ FIREWALL DATACENTER<br \/>\n<a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Power Cluster<\/a><\/td>\n<td>Low (*)<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>450 &#8211; 1000 Mbps<\/td>\n<td>Not less than 3,5 GHz Quad\/Octa Core<\/td>\n<td>A2-Server Cluster<br \/>\nA3-Server Cluster<\/td>\n<td>Medium (*)<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc; border-bottom: 1px solid #ccc;\">\n<td>Up to 10 Gbps<\/td>\n<td>Not less than 3,5 GHz Xeon Quad\/Octa Core<\/td>\n<td>A2-Server Cluster<br \/>\nA3-Server Cluster<\/td>\n<td>Medium (*)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>(*) The Power Cluster and APUTM models with Intel I7 CPU have a Medium noise level only if they are subjected to strong and continuous workloads.<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">2. Features or additional packages of pfSense\u00ae\/OPNsense\u00ae used<\/h3>\n<p>Many features of <strong>pfSense CE\/OPNsense<\/strong>\u00a0greatly influence hardware sizing.<\/p>\n<p><strong>VPN<\/strong>: the heavy use of the VPN service greatly increases the CPU requirements. Encryption and decryption of packets increases the load on the CPU. The number of connections is a less troubling factor than throughput.<\/p>\n<ul>\n<li>266 MHz CPU supports approximately 4 Mbps of IPsec traffic<\/li>\n<li>500 MHz CPU supports about 10-15 Mbps of IPsec traffic<\/li>\n<li>New-generation I7 or I3 CPUs support almost up to 200 Mbps of IPsec traffic<\/li>\n<li>New generation XEON CPU for loads over 400 Mbps<\/li>\n<\/ul>\n<p><strong>Squid &#8211; Squidguard &#8211; outbound proxy traffic control<\/strong>: both packages use a lot of CPU and disk writes. Therefore, it is strongly discouraged to use the Entry level, and<a href=\"https:\/\/www.miniserver.store\/firewall\/entry-level\/firewall-entry-level-2-nic-apu2-based-2gb-ram\" target=\"_blank\" rel=\"noopener\"> Entry Level APU2<\/a>.<br \/>\nFor this type of work it is strongly recommended to use A<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/appliance-small-utm-3\" target=\"_blank\" rel=\"noopener\">ppliance Small UTM 3,<\/a> <a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/compact-small-utm-3\" target=\"_blank\" rel=\"noopener\">Compact Small UTM 3<\/a>, <a href=\"https:\/\/www.miniserver.store\/appliance-small-utm-2-gsm-4g-lte\" target=\"_blank\" rel=\"noopener\">A2SUTM<\/a>, <a href=\"https:\/\/www.miniserver.store\/firewall\/datacenter\/appliance-a1-server-aluminum\" target=\"_blank\" rel=\"noopener\">A1-Server<\/a>, <a href=\"https:\/\/www.miniserver.store\/appliance-a2-server-aluminum\" target=\"_blank\" rel=\"noopener\">A2-Server,<\/a> <a href=\"https:\/\/www.miniserver.store\/appliance-a3-server-aluminum\" target=\"_blank\" rel=\"noopener\">A3-Server<\/a> or <a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM <\/a>with SSD or Classic disks.<br \/>\nHowever, it is also possible to use optimized with only the squid package on \u00a0<a href=\"https:\/\/www.miniserver.store\/firewall\/entry-level\/firewall-entry-level-2-nic-apu2-based-2gb-ram\" target=\"_blank\" rel=\"noopener\">Entry Level APU2<\/a>\u00a0provided that you use the writing on the disk support sparingly and in any case to the detriment of performance.<\/p>\n<p><strong>pfBlockerNg:<\/strong> pfBlockerNG is a package for pfSense\u00ae that allows extending the functionality of the firewall beyond the traditional L2 \/ L3 \/ L4 firewall. pfBlockerNG allows you to configure the firewall to allow \/ deny traffic based on elements such as the geo location of an IP address, the domain name (for example to block Facebook and the like) or Alexa&#8217;s assessments of certain websites.<\/p>\n<p><strong>This package requires an increase in CPU and RAM <\/strong>from 15% to 25%.<\/p>\n<p>To learn more about this package, you can consult the guide we have created and published in our guide area.<\/p>\n<p><strong>Captive Portal:<\/strong> Environments with hundreds of connections require a lot of CPU. With reference to the throughput table it will be necessary to increase users by 15-20% to get the recommended platform.<\/p>\n<p><strong>Large<\/strong> state tables: Each entry in the state table requires 1 KB. The state table, when full, has 10,000 entries, so about 10 MB of RAM. For larger state tables, with hundreds of thousands of connections it will be necessary to properly size the RAM.<\/p>\n<p><strong>Packages<\/strong>: many packages significantly increase the amount of RAM used. For example, snort and ntop should not be installed on hardware platforms with less than 512 MB of RAM and at least 32 GB of disk.<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">Version of pfSense\u00ae\/OPNsense\u00ae to be installed<\/h3>\n<p>The difference between the two types of installations that can be made with <strong>pfSense\/OPNsense<\/strong>\u00a0on different devices should be emphasized.<\/p>\n<p>We remind you that as far as pfSense is concerned, the last version that can be installed on CF (ie the embedded version) is 2.3.5, while for OPNsense the termination of the support is not envisaged.<\/p>\n<ul>\n<li>The <strong>Embedded<\/strong> solution (<strong>firewall Entry Level<\/strong>) DOES NOT allow the writing of <strong>log files<\/strong> on the memory (C.F. or DOM) and in any case it is strongly discouraged to do so. On this version it is not possible to install some of the additional packages of <strong>pfSense\/OPNsense.<\/strong><\/li>\n<li>The solution that installs on a hard disk (normally on UTM or higher Appliance solutions) has the ability to save the logs inside it. On this version it is possible to <strong>install all the additional packages supplied for pfSense\/OPNsense.<\/strong><\/li>\n<li>We remind you that pfSense 2.5.X will be installed only on hardware with a CPU with AES-IN support<\/li>\n<\/ul>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">3. Deepening on the network card chipsets<\/h3>\n<p>Choosing a network card is essential for those who are designing a medium \/ large system.<\/p>\n<p>As you can see from the product descriptions, we always specify very well if the devices integrate Intel or Realtek chipsets internally.<\/p>\n<p>From about mid-2016 onwards virtually all our devices are equipped with Intel chipsets.<\/p>\n<p>The Realtek chipset is less powerful than the Intel chipset and is suitable mainly for less intense workloads. However, for a company that does not require high throughputs (like 85% of Italian companies) it remains the ideal choice.<\/p>\n<p>The Intel chipset, on the other hand, offers greater performance in the event of heavy traffic: in fact, it offers several advanced features such as queue management and, from the pfSense 2.2 version, also improved multi-core support. This results in higher throughput and less CPU load.<\/p>\n<p>To be precise, full support for multicores has been introduced on FreeBSD, that is, by S.O. father of <strong>pfSense and OPNsense,<\/strong> so the same argument made for pfSense is valid and will apply to OPNsense in the future.<\/p>\n<p>If you are still using pfSense\u00ae 2.1.x, we have published an in-depth study on optimizing Intel NICs by<a href=\"https:\/\/blog.miniserver.it\/en\/firewall\/tuning-and-troubleshooting-network-cards\/\"> tuning the driver and settings<\/a>. However, we specify that up to now our appliances do not need such optimization. However, we insert it for completeness.<\/p>\n<p>On the current versions of <strong>pfSense\/OPNsense<\/strong>\u00a0it does not seem necessary to make changes.<\/p>\n<p>If you think your appliances have performance problems arising from NICs, you can use <a href=\"https:\/\/blog.miniserver.it\/en\/pfsense\/pfsense-hardware-throughput-problems-and-system-troubleshooting\/\">this guide<\/a> to diagnose the problem.<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">4. Sizing according to the noise of the equipment<\/h3>\n<p>To provide the <strong>right product<\/strong>, you need to think about where the firewall will be placed.<\/p>\n<p>If the device is placed near people who work, it will be necessary to choose a machine with a low noise level or it will be necessary to purchase a silent silent kit!<\/p>\n<p>Lately, due to Intel&#8217;s new 25-nanometer technology, the absorbed power has greatly reduced and consequently the dissipated heat has also decreased.<\/p>\n<p>From the design point of view, we preferred to maintain the fan in the high-end models (typically used in data centers or CEDs). This is because, if the board or CPU detects high temperatures, using the fan would bring the temperature back to acceptable levels in a few seconds.<\/p>\n<p>Below is a table showing indicative data on the <strong>noise level<\/strong> of the equipment:<\/p>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"background: #00a0df none repeat scroll 0% 0%; border-top: 1px solid #cccccc;\">\n<td><span style=\"color: #ffffff;\"><strong>Band Apparatus<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>Noise level<\/strong><\/span><\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td>Entry Level \u00a0\/ <a href=\"https:\/\/www.miniserver.store\/firewall\/entry-level\/firewall-entry-level-2-nic-apu2-based-2gb-ram\" target=\"_blank\" rel=\"noopener\">APU2 Entry Level<\/a> \/ <a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/appliance-small-utm-3\" target=\"_blank\" rel=\"noopener\">Appliance Small UTM 3<\/a> \/<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/compact-small-utm-3\" target=\"_blank\" rel=\"noopener\"> Compact Small UTM 3<\/a> \/<a href=\"https:\/\/www.miniserver.store\/nano-cluster-apu2e-2gb\" target=\"_blank\" rel=\"noopener\"> NanoCluster<\/a> \/ <a href=\"https:\/\/www.miniserver.store\/appliance-small-utm-2-gsm-4g-lte\" target=\"_blank\" rel=\"noopener\">A2SUTM<\/a> \/ <a href=\"https:\/\/www.miniserver.store\/small-cluster\" target=\"_blank\" rel=\"noopener\">Small Cluster<\/a><\/td>\n<td>Level 0 (completamente fan less)<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc;\">\n<td><a href=\"https:\/\/www.miniserver.store\/firewall\/datacenter\/appliance-a1-server-aluminum\" target=\"_blank\" rel=\"noopener\">A1-Server<\/a><\/td>\n<td>Level 1 (rumore quasi impercettibile)<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ccc; border-bottom: 1px solid #ccc;\">\n<td><a href=\"https:\/\/www.miniserver.store\/appliance-a2-server-aluminum\" target=\"_blank\" rel=\"noopener\">A2-Server<\/a> \/ <a href=\"https:\/\/www.miniserver.store\/appliance-a3-server-aluminum\" target=\"_blank\" rel=\"noopener\">A3-Server<\/a><br \/>\n<a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Power Cluster<\/a> \/ <a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM<\/a><\/td>\n<td>Level 4 (rumore udibile from 4\/5 meters)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>Notes on noise:<\/strong>:<br \/>\na device that dissipates heat well, will certainly last longer and will be more stable and reliable!<br \/>\nThat&#8217;s why our high-end devices are designed in such a way that the airflow &#8220;invests&#8221; the internal components by cooling them.<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">5. RAID function<\/h3>\n<p>One of the functions most appreciated by pfSense CE\/OPNsense in terms of <strong>hardware reliability<\/strong> is the <strong>Raid <\/strong>functionality directly implemented by the FreeBSD operating system.<br \/>\nThis function guarantees a higher level of reliability of the application as in the event of a disk failure the application will continue to function as if nothing had happened.<br \/>\nThis function is supported by:<br \/>\n<a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/appliance-small-utm-3\" target=\"_blank\" rel=\"noopener\">Appliance Small UTM 3<\/a> \/<\/p>\n<p><a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/compact-small-utm-3\" target=\"_blank\" rel=\"noopener\">Compact Small UTM 3<\/a>,<\/p>\n<p><a href=\"https:\/\/www.miniserver.store\/appliance-small-utm-2-gsm-4g-lte\" target=\"_blank\" rel=\"noopener\">A2SUTM<\/a>,<\/p>\n<p><a href=\"https:\/\/www.miniserver.store\/firewall\/datacenter\/appliance-a1-server-aluminum\" target=\"_blank\" rel=\"noopener\">A1-Server<\/a>,<\/p>\n<p><a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM<\/a>,<\/p>\n<p><a href=\"https:\/\/www.miniserver.store\/appliance-a2-server-aluminum\" target=\"_blank\" rel=\"noopener\">A2-Server<\/a>,<\/p>\n<p><a href=\"https:\/\/www.miniserver.store\/appliance-a3-server-aluminum\" target=\"_blank\" rel=\"noopener\">A3-Serve<\/a>r and in all the Cluster versions of our devices except the NanoCluster.<br \/>\nFor those wishing to deepen the subject, we published a guide that explains how it works and how to intervene on the equipment in case of failure. You can find it under the guide menu.<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">6. When should I use a Cluster system?<\/h3>\n<p>A Cluster system is a solution composed of a <strong>system having two completely independent hardware devices<\/strong>. There are 3 versions of Cluster solutions, one for small offices and the other for heavy traffic and \/ or medium\/large structures.<\/p>\n<ul style=\"text-align: justify;\">\n<li><a href=\"https:\/\/www.miniserver.store\/nano-cluster-apu2e-2gb\" target=\"_blank\" rel=\"noopener\">NANOCluster<\/a>: compact 1U solution, designed for small offices<\/li>\n<li><a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Small Cluster<\/a>: 2U solution for SMEs and \/ or small Datacenters that do not want to give up high reliability<\/li>\n<li><a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Power Cluster<\/a>: 2U solution for companies and organizations that need high reliability<\/li>\n<li>A2-Server Cluster and A3-Server Cluster: 2U Datacenter-level solution that provides high reliability<\/li>\n<\/ul>\n<p>The Small Cluster and the Power Cluster are 2U devices, consisting of 2 independent drawers, while the <strong>NanoCluster<\/strong> is composed of two <strong>Entry Level devices<\/strong>.<br \/>\nUsing pfSense CE or OPNsense you can get a real passive active Cluster configured to obtain high reliability between the 2 devices that become in effect the cluster nodes.<br \/>\nThe others S.O. they do not have (hopefully for now) a function like the CARP of pfSense CE\/OPNsense but they can still be configured in such a way that the user can manually switch off one of the two systems and turn on the other. We can therefore say that it is a Cluster system that in the case of pfSense\u00ae CE and OPNsense\u00ae is automatic and in the case of other S.O. it&#8217;s manual. This system should be used in <strong>environments where high reliability is mandatory<\/strong>.<\/p>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">7. Instant sizing<\/h3>\n<p>Based on our experiences we have compiled a classification of the installations we have followed over the years. This classification is not only the result of the experience made during the installation of the firewall, but also of the technological evolution that the user requires to the device during the years of use.<\/p>\n<p>The results are linked, for example, to the technological evolution that every company \/ entity undergoes or requires over the years for different needs. For example, small businesses initially require the installation of a simple firewall. Normally it does not take much time to submit requests such as VPN, content filtering or navigation rules.<\/p>\n<p>For this reason, based on the number of &#8220;active devices&#8221; (ie devices connected to the Internet) we have elaborated the following table which also takes into account the above concepts:<\/p>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"background-color: #00a0df;\">\n<td><span style=\"color: #ffffff;\"><strong>Firewall model<\/strong><\/span><\/td>\n<td><span style=\"color: #ffffff;\"><strong>N.of active devices<\/strong><\/span><\/td>\n<\/tr>\n<tr style=\"background-color: #ffffff; border-top: 1px solid #ffffff;\">\n<td>Entry Level o <a href=\"https:\/\/www.miniserver.store\/nano-cluster-apu2e-2gb\" target=\"_blank\" rel=\"noopener\">Nano Cluster<\/a><\/td>\n<td>from 1 a 5 users<\/td>\n<\/tr>\n<tr style=\"background-color: #cfcfee; border-top: 1px solid #ffffff;\">\n<td>\u00a0<a href=\"https:\/\/www.miniserver.store\/firewall\/entry-level\/firewall-entry-level-2-nic-apu2-based-2gb-ram\" target=\"_blank\" rel=\"noopener\">Entry Level APU2<\/a> o <a href=\"https:\/\/www.miniserver.store\/nano-cluster-apu2e-2gb\" target=\"_blank\" rel=\"noopener\">Nano Cluster<\/a><\/td>\n<td>from 1 a 10 users<\/td>\n<\/tr>\n<tr style=\"background-color: #ffffff; border-top: 1px solid #ffffff;\">\n<td><a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/appliance-small-utm-3\" target=\"_blank\" rel=\"noopener\">Appliance Small UTM 3<\/a> o <a href=\"https:\/\/www.miniserver.store\/compact-small-utm\" target=\"_blank\" rel=\"noopener\">COMPACT SMALL UTM<\/a> o <a href=\"https:\/\/www.miniserver.store\/appliance-small-utm-2-gsm-4g-lte\" target=\"_blank\" rel=\"noopener\">A2SUTM<\/a> o <a href=\"https:\/\/www.miniserver.store\/small-cluster\" target=\"_blank\" rel=\"noopener\">Small Cluster<\/a><\/td>\n<td>from 8 a 35 users<\/td>\n<\/tr>\n<tr style=\"background-color: #cfcfee; border-top: 1px solid #ffffff;\">\n<td><a href=\"https:\/\/blog.miniserver.it\/en\/?page_id=16161\">Appliance Small UTM 3<\/a> o <a href=\"https:\/\/www.miniserver.store\/firewall\/firewall-corporate\/compact-small-utm-3\" target=\"_blank\" rel=\"noopener\">Compact Small UTM 3<\/a> o <a href=\"https:\/\/www.miniserver.store\/firewall\/datacenter\/appliance-a1-server-aluminum\" target=\"_blank\" rel=\"noopener\">A1-Server<\/a> o <a href=\"https:\/\/www.miniserver.store\/small-cluster\" target=\"_blank\" rel=\"noopener\">Small Cluster<\/a><\/td>\n<td>from 20 a 60 users<\/td>\n<\/tr>\n<tr style=\"background-color: #ffffff; border-top: 1px solid #ffffff;\">\n<td><a href=\"https:\/\/www.miniserver.store\/firewall\/datacenter\/appliance-a1-server-aluminum\" target=\"_blank\" rel=\"noopener\">A1-Server<\/a> o <a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Power Cluster<\/a><\/td>\n<td>from 50 a 350 users<\/td>\n<\/tr>\n<tr style=\"background-color: #cfcfee; border-top: 1px solid #ffffff;\">\n<td><a href=\"https:\/\/www.miniserver.store\/appliance-a2-server-aluminum\" target=\"_blank\" rel=\"noopener\">A2-Server <\/a>o <a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM<\/a> o <a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Power Cluster<\/a><\/td>\n<td>from 100 a 2000 users<\/td>\n<\/tr>\n<tr style=\"background-color: #ffffff; border-top: 1px solid #ffffff;\">\n<td><a href=\"https:\/\/www.miniserver.store\/appliance-a3-server-aluminum\" target=\"_blank\" rel=\"noopener\">A3-Server<\/a> o <a href=\"https:\/\/www.miniserver.store\/power-utm\" target=\"_blank\" rel=\"noopener\">APUTM<\/a> o <a href=\"https:\/\/www.miniserver.store\/power-cluster\" target=\"_blank\" rel=\"noopener\">Power Cluster<\/a><\/td>\n<td>from 100 a 3500\/5000 users<\/td>\n<\/tr>\n<tr style=\"border-top: 1px solid #ffffff; background-color: #cfcfee;\">\n<td><a href=\"https:\/\/www.miniserver.store\/appliance-a3-server-aluminum\" target=\"_blank\" rel=\"noopener\">A3-Server<\/a><\/td>\n<td>from 500 a 10.000 users<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3 style=\"color: #00a0df; font-size: 20px; text-align: left;\">8. Devices performance analysis<\/h3>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"background-color: #00a0df;\">\n<td style=\"text-align: center;\" colspan=\"7\"><span style=\"color: #ffffff;\"><strong>NO VPN<\/strong><\/span><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>BRIDGE<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>NAT<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>ALIX<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">86,60 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">87,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,123 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">86,57 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">88,40 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,122 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>APU<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">474,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">735,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,028 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">474,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">535,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,037 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>CASUTM<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">595,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">653,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,033 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">595,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">535,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,037 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>AUTM5<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">754,50 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">735,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,024 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">551,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">560,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,035 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>Power Microcluster<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">939,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">784,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,029 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">942,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">784,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,025 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>APUTM<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">939,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">784,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,029 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">942,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">784,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,025 ms<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"background-color: #00a0df;\">\n<td style=\"text-align: center;\" colspan=\"10\"><span style=\"color: #ffffff;\"><strong>OPENVPN<\/strong><\/span><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>AES128<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>AES256<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>Blowfish<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>ALIX<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">13,43 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">18,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,052 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">12,30 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">16,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,048 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">14,67 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">20,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,095 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>APU<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">68,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">60,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,055 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">58,63 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">55,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,073 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">79,33 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">68,40 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,057 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>CASUTM<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">62,77 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">75,50 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,038 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">56,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">65,30 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,064 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">71,93 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">87,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,040 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>AUTM5<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">80,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">94,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,026 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">69,40 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">80,25 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,042 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">97,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">114,80 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,040 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>Power<br \/>\n<\/strong><strong> Microcluster<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">135,24 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">121,74 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,024 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">116,16 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">106,88 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,031 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">153,79 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">138,41 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,029 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>APUTM<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">135,24 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">121,74 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,024 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">116,16 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">106,88 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,031 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">153,79 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">138,41 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,029 ms<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"background-color: #00a0df;\">\n<td style=\"text-align: center;\" colspan=\"13\"><span style=\"color: #ffffff;\"><strong>IPSec<\/strong><\/span><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>AES128<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>AES256<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>Blowfish128<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>3DES<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>ALIX<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">15,27 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">16,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,105 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">13,73 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">14,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,116 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">14,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">15,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,106 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">8,62 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">9,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,089 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>APU<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">49,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">70,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,061 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">45,60 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">54,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,028 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">44,60 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">58,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,083 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">26,53 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">32,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,051 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>CASUTM<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">60,13 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">67,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,042 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">56,03 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">63,20 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,049 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">56,87 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">66,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,057 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">34,43 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">37,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,042 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>AUTM5<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">74,22 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">80,40 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,079 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">68,60 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">73,50 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,064 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">69,70 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">71,30 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,074 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">37,80 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">40,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,023 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>Power<br \/>\n<\/strong><strong> Microcluster<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">109,54 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">106,77 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,039 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">103,72 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">96,06 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,035 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">105,99 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">95,01 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,039 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">62,82 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">54,86 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,024 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>APUTM<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">109,54 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">106,77 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,039 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">103,72 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">96,06 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,035 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">105,99 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">95,01 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,039 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">62,82 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">54,86 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,024 ms<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<table style=\"width: 100%;\">\n<tbody>\n<tr style=\"background-color: #00a0df;\">\n<td style=\"text-align: center;\" colspan=\"10\"><span style=\"color: #ffffff;\"><strong>IPSec<\/strong><\/span><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>AES128<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>AES256<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"3\"><strong>3DES<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>TCP<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\" colspan=\"2\"><strong>UDP<\/strong><\/td>\n<\/tr>\n<tr>\n<td><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Band<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #fff; border-right: 1px solid #fff; background: #cfcfee; text-align: center;\"><strong>Jitter<\/strong><\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>ALIX<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">15,27 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">16,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,105 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">13,73 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">14,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,116 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">8,62 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">9,00 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,089 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>ALIX + Card (*)<br \/>\n<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">48,33 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">39,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,061 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">48,07 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">39,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,078 ms<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">48,57 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">39,10 Mbps<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">0,049 ms<\/td>\n<\/tr>\n<tr>\n<td style=\"border-bottom: 1px solid #fff; background: #cfcfee;\"><strong>Gain [%]\n<\/strong><\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">216,50%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">144,38%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">41,90%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">250,11%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">179,29%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">32,76%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">463,46%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">334,44%<\/td>\n<td style=\"border-bottom: 1px solid #cfcfee; border-right: 1px solid #cfcfee;\">44,94%<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>(*) These measurements were made using the compression hardware module.<\/p>\n<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>The following hardware sizing guide was written initially and primarily for the pfSense\u00ae CE and OPNsense\u00ae operating systems.<\/p>\n","protected":false},"author":11,"featured_media":23665,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[123],"tags":[137,138],"class_list":["post-14135","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-firewall","tag-opnsense-en","tag-pfsense-en"],"_links":{"self":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/14135","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/comments?post=14135"}],"version-history":[{"count":27,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/14135\/revisions"}],"predecessor-version":[{"id":23909,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/posts\/14135\/revisions\/23909"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/media\/23665"}],"wp:attachment":[{"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/media?parent=14135"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/categories?post=14135"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.miniserver.it\/en\/wp-json\/wp\/v2\/tags?post=14135"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}