Performance Test Results
High-speed performance tests are extremely difficult to test in the real world consistently. To ensure we can measure the true packet performance of the Firewalla Pro, all the tests below use a lab setup emulating LAN -> Firewalla -> WAN.
- Firewalla Gold Pro (Engineering Sample)
- Three country-blocking rules
- Large target list blocking rule with roughly 8000 entries.
- IDS/IPS/Active Protect On
- We will do multiple rounds of testing and average out the results.
Test 1: WAN DHCP/Static IP (10G)
- Network Setup
- Gold PRO sets up DHCP WAN to PC2
- Gold PRO sets up a LAN, and PC1 connects to the LAN port
- Run iPerf3 server on PC2
iperf3 -s
- Run iPerf client on PC1
# download
iperf3 -c <PC2_LAN_ip> -P4 -R -Z -t 30
# upload
iperf3 -c <PC2_LAN_ip> -P4 -Z -t 30
- Test Case Combinations
| Direction | QoS | Result |
|---|---|---|
| Download | Off | 9.41Gbps |
| Upload | Off | 9.41Gbps |
| Download | FQ_Codel | 9.36Gbps |
| Upload | FQ_Codel | 9.41Gbps |
| Download | CAKE | 8.75Gbps |
| Upload | CAKE | 9.41Gbps |
- Monitoring tools
sudo htop
bmon -b -p e*,if*
Test 2: WAN PPPoE (10G)
- Network Setup
- Gold PRO sets up PPPoE WAN to PC2
- Gold PRO sets up a LAN, and PC1 connects to the LAN port
- Run iPerf3 server on PC2
iperf3 -s
- Setup and run a high-performance PPPoE server on PC2
- Run iPerf client on PC1
# download
iperf3 -c <PC2_LAN_ip> -P4 -R -Z -t 30
# upload
iperf3 -c <PC2_LAN_ip> -P4 -Z -t 30
- Test Case Combinations
| Direction | QoS | Result |
|---|---|---|
| Download | Off | 9 Gbps |
| Upload | Off | 7 Gbps |
| Download | FQ_Codel | 3.29Gbps |
| Upload | FQ_Codel | 3.48Gbps |
| Download | CAKE | 2.44Gbps |
| Upload | CAKE | 3.46Gbps |
- Monitoring tools
sudo htop
bmon -b -p e*,p*,if*
Test 3: Inter-VLAN Traffic (10G)
- Network Setup
- A 10G managed switch with 3 ports configured
- port 1: untagged in VLAN 101
- port 2: untagged in VLAN 102
- port 3: tagged in VLAN 101 and VLAN102
- Gold PRO sets up 2 VLANs 101/102 on LAN, which connects to switch port 3
- PC1 connects to Switch port 1
- PC2 connects to Switch port 2
- A 10G managed switch with 3 ports configured
- Run iPerf3 server on PC2
iperf3 -s
- Run iPerf client on PC1
# download
iperf3 -c <PC2_ip> -P4 -R -Z -t 30
# upload
iperf3 -c <PC2_ip> -P4 -Z -t 30
- Test Case Combinations
| Direction | Result |
|---|---|
| Download | 9.3Gbps |
| Upload | 9.3Gbps |
- Monitoring tools
sudo htop bmon -b -p e*
FAQ
Is the unit rack mountable?
Yes, we will release an optional rack mount kit in late 2024.
Are the 10Gbit ports multi-speed?
Yes, they are. They can negotiate and operate at 10Gbit, 5Gbit, 2.5Gbit, 1Gbit, and most likely 100Mbit. The 2.5Gbit port can operate at 2.5Gbit, 1Gbit, and 100Mbit.
Will the Gold Pro support Simple Mode and/or DHCP mode?
No.
At least not officially. Simple mode via ARP spoofing is challenging to make right with high-speed networks. Due to its compatibility with Android 14, we list it as a Legacy feature, which means we will eventually drop support. Single port DHCP mode may also be slower; we will list it as legacy or not support it on the Gold Pro.
How fast will PPPoE be?
At the moment, PPPoE is limited to 3 to 3.5 Gbits (this number will most likely be much higher during beta).
Are there SFP+ or SFP ports on the Gold Pro?
No, all ports are RJ45, NBASE-T ports.
Is the case plastic?
It is all metal.
Where will the Gold Pro be made?
Made in Taiwan
Do you know if the Gold rack tray will work with this unit?
No, this unit is full rack height and will be much simpler to mount.
Is there a trade-in or trade-up program?
No. However, our products tend to retain their value quite well, so you should be able to resell any Firewalla you no longer need.
Will Firewalla Wi-Fi SD work with the Firewalla Gold Pro?
Yes.
Comments
0 comments
Article is closed for comments.