F5F Stay Refreshed Power Users Networks Settings for maximum data speed on Telus Gigabit router

Settings for maximum data speed on Telus Gigabit router

Settings for maximum data speed on Telus Gigabit router

_
_GummyBunny_
Junior Member
14
01-17-2023, 10:51 AM
#1
Hello everyone, I’m relocating to Vancouver, BC soon and will switch to Telus’ full-gigabit service at my new location. Right now I’m using AT&T gigabit in LA, but my Edgerouter X limits me to just 1gigabit total—meaning I only get the download speed when almost nothing is being uploaded simultaneously. Since I do remote VFX work, I’m considering upgrading to a router that can handle heavy WAN traffic without affecting streaming for my girlfriend. I also expect VPN usage and will likely need VLAN segmentation for better network organization. Looking into alternatives to Edgerouter 4, I’m thinking about a pfSense device. What CPU requirements should I aim for in such a setup?
_
_GummyBunny_
01-17-2023, 10:51 AM #1

Hello everyone, I’m relocating to Vancouver, BC soon and will switch to Telus’ full-gigabit service at my new location. Right now I’m using AT&T gigabit in LA, but my Edgerouter X limits me to just 1gigabit total—meaning I only get the download speed when almost nothing is being uploaded simultaneously. Since I do remote VFX work, I’m considering upgrading to a router that can handle heavy WAN traffic without affecting streaming for my girlfriend. I also expect VPN usage and will likely need VLAN segmentation for better network organization. Looking into alternatives to Edgerouter 4, I’m thinking about a pfSense device. What CPU requirements should I aim for in such a setup?

E
Error_Sans55
Member
245
01-18-2023, 11:52 PM
#2
Are you sure? The device appears to lack significant hardware offloading and SQM features. Just because it supports pfSense and a gigabit VPN doesn’t mean it’s fully optimized for those tasks.
E
Error_Sans55
01-18-2023, 11:52 PM #2

Are you sure? The device appears to lack significant hardware offloading and SQM features. Just because it supports pfSense and a gigabit VPN doesn’t mean it’s fully optimized for those tasks.

Y
yepesGamer_PvP
Junior Member
17
01-19-2023, 01:09 AM
#3
If you review that page carefully, it doesn’t support Gigabit under typical conditions. It can manage Gigabit traffic without additional features but is limited to 656Mbit as a firewall—likely referring to NAT. The document mentions 74Mbit over IPsec, which seems quite low given the resource demands compared to OpenVPN. For a low-power device, an Intel 7th Gen Core i5-7200U appears to be the most suitable option, capable of handling even Gigabit OpenVPN if needed. My setup is the Kettop Mi7200L6, but I haven’t tested Gigabit yet.
Y
yepesGamer_PvP
01-19-2023, 01:09 AM #3

If you review that page carefully, it doesn’t support Gigabit under typical conditions. It can manage Gigabit traffic without additional features but is limited to 656Mbit as a firewall—likely referring to NAT. The document mentions 74Mbit over IPsec, which seems quite low given the resource demands compared to OpenVPN. For a low-power device, an Intel 7th Gen Core i5-7200U appears to be the most suitable option, capable of handling even Gigabit OpenVPN if needed. My setup is the Kettop Mi7200L6, but I haven’t tested Gigabit yet.

O
OceanBear
Member
103
02-01-2023, 07:57 PM
#4
I was considering the SG-5100 and ended up focusing on the SG-1100. It seems the SG-1100 has been a frequent topic for me recently, especially since I’ve been eager to try it out. Are people still using IPSec today? It might be time to shift toward WireGuard, as more VPN services are beginning to support it.
O
OceanBear
02-01-2023, 07:57 PM #4

I was considering the SG-5100 and ended up focusing on the SG-1100. It seems the SG-1100 has been a frequent topic for me recently, especially since I’ve been eager to try it out. Are people still using IPSec today? It might be time to shift toward WireGuard, as more VPN services are beginning to support it.

K
KidzBeEz
Member
242
02-07-2023, 11:57 PM
#5
It appears there was a disagreement between Netgate developers and the person porting Wireguard, keeping OpenVPN as the standard. It seems misleading for them to highlight IPsec performance since it's generally the most CPU-friendly VPN. Likely it remains popular in business settings.
K
KidzBeEz
02-07-2023, 11:57 PM #5

It appears there was a disagreement between Netgate developers and the person porting Wireguard, keeping OpenVPN as the standard. It seems misleading for them to highlight IPsec performance since it's generally the most CPU-friendly VPN. Likely it remains popular in business settings.

M
Micel002
Member
153
02-09-2023, 10:56 AM
#6
It seems WireGuard is now viable. The outlook looks quite encouraging.
M
Micel002
02-09-2023, 10:56 AM #6

It seems WireGuard is now viable. The outlook looks quite encouraging.

X
XavegX367
Member
60
02-10-2023, 01:35 AM
#7
I'm running it with no QoS and all hardware offloading (hwnat) on. So currently there's no real bottleneck 99.9% of the time, unless I do the aforementioned simultaneous upload/download from sites with big pipes. But once I want to use QoS or certain other features beyond my current bare-metal setup (two subnets, no VLANs) it will become an issue. https://community.ui.com/questions/EdgeR...5f0eef93a2 See also orby's comment on this reddit thread: So I'm looking to beef up enough to get the most out of the pipe, including for VPN's. My anticipated use case, in addition to a better segmented network using VLANs, will also likely include VPN connections to secure client sites, where I'll potentially be sending up to hundreds of GB of data.
X
XavegX367
02-10-2023, 01:35 AM #7

I'm running it with no QoS and all hardware offloading (hwnat) on. So currently there's no real bottleneck 99.9% of the time, unless I do the aforementioned simultaneous upload/download from sites with big pipes. But once I want to use QoS or certain other features beyond my current bare-metal setup (two subnets, no VLANs) it will become an issue. https://community.ui.com/questions/EdgeR...5f0eef93a2 See also orby's comment on this reddit thread: So I'm looking to beef up enough to get the most out of the pipe, including for VPN's. My anticipated use case, in addition to a better segmented network using VLANs, will also likely include VPN connections to secure client sites, where I'll potentially be sending up to hundreds of GB of data.

T
The_FireGamer
Junior Member
37
02-17-2023, 01:30 PM
#8
This experience initially made me cautious about adopting pfSense, but the article really changed my perspective.
T
The_FireGamer
02-17-2023, 01:30 PM #8

This experience initially made me cautious about adopting pfSense, but the article really changed my perspective.

T
tyler12041
Junior Member
1
02-17-2023, 09:02 PM
#9
I was thinking about OPNsense but it would be tough to give up the confidence it gives me from pfBlockerNG stopping bad actors. I don’t rely on adblocking since it disrupts too much. Plus, I didn’t feel like recreating my setup.
T
tyler12041
02-17-2023, 09:02 PM #9

I was thinking about OPNsense but it would be tough to give up the confidence it gives me from pfBlockerNG stopping bad actors. I don’t rely on adblocking since it disrupts too much. Plus, I didn’t feel like recreating my setup.

P
194
03-08-2023, 12:26 AM
#10
Hi all, I've discovered that Novus 2.5 gigabit internet is available in my building, and after a day or two of reading, that changes quite a lot. I'm going to start a new topic on that.
P
PanicOregon281
03-08-2023, 12:26 AM #10

Hi all, I've discovered that Novus 2.5 gigabit internet is available in my building, and after a day or two of reading, that changes quite a lot. I'm going to start a new topic on that.