DATASHEET NSHO-002 Intel 3855U 6 LAN 1 COM WiFi 4G Firewall 1U Rackmount Server https://www.pondesk.com/product/NSHO-002 Features ● 6th Gen. Skylake Intel® Celeron® Processor 3855U ● Intel® AES-NI and Secure Key ● 6x Intel® I210-AT Gigabit Ethernet (Support Wake on LAN/PXE) ● RJ45 Serial Port (CISCO Standard) ● Support up to 32GB SODIMM DDR4 Memory ● Support Dual Storage (mSATA & 2.5" SATA SSD/HDD) ● VGA HD Display ● Support WiFi and 3G/4G LTE WWAN Networks ● Energy Efficient 15W (idle) Low Power Consumption ● Ready for IoT - Simply Connected Using 3G/4G LTE via Mini PCIe ● Support Windows/Windows Server/Linux/Unix/Firewalls/Hypervisor ● Can be configured as a Firewall, LAN/WAN Router, VPN, DNS Server, DHCP Server etc. Specifications Dimensions Processor Security & Reliability 6th Generation Skylake Intel® AES New Instructions Intel® Celeron® Processor 3855U Secure Key 2 MB SmartCache, 1.60 GHz Execute Disable Bit Memory Expansion Slot Support up to 32 GB 1 x Mini-PCIE Slot (For WIFI, 3G/4G) W SODIMM DDR4 Memory 1 x mSATA Slot (For SSD) 2 Memory Slots 1 x 2.5" SATA Slot (For 2.5” SSD/HDD) Storage Onboard I/O Support 1 x mSATA SSD 1 x JVGA1 (2*1 2pin) Support 1 x 2.5" SATA SSD/HDD 1 x RS232 Serial Port (2*5pin) H L 2 x LAN_LED (2*13pin) Graphics 2 x USB2.0 (2*5pin) Intel® HD Graphics 510 1 x USB3.0 (2*10pin) 430mm x 280mm x 45mm (L*W*H) VGA HD Display 1 x PS/2 KB/MS (1*6pin) 300 MHz Base Frequency 1 x FP1 Front Panel Connector (2*5pin) 900 MHz Max Dynamic Frequency 1 x SIM Interface (1*6pin) Intel® Quick Sync Video 1 x HDD Power Connector (1*4pin) Intel® Clear Video HD Technology 1 x ATX 1U 4pin Connector 1 x CPUFAN (4pin) Package LAN 1 x SYSFAN (3pin) MODEL # NSHO-002 ■ 1 x Network Server Six Gigabit Ethernet Ports P/N: NO026G1UND6L1C ■ 1 x Power Cord Intel I210-AT Gigabit Ethernet Controller OS Support Wake on LAN/PXE Support Windows 7/8/10 & Windows Server, Linux 48V 1.5A PoE @ LAN5 & LAN 6 (optional) and Unix etc. I/O Specifications Support VMware ESXi and VirtualBox Support pfSense, Untangle, Debian, Smoothwall, Optional 6 x Gigabit LAN ClearOS, m0n0wall etc. 1 x RJ45 Console (CISCO standard) 3G/4G/WiFi 802.11 b/g/n WiFi (PCIe Module) 3G (up to 14.4 Mbps) 2 x USB 2.0, 1 x VGA Power & Working Environment 4G (up to 150 Mbps) 2 x LED Signal Indicator Power Input: 100~240V - 50-60Hz 3G (14.4 Mbps) + USB N WiFi Power & Reset Switch Power Consumption: 15W (idle) 4G (150 Mbps) + USB N WiFi Operating Temperature: 0°C ~ 50°C Memory 4GB/8GB/16GB(2x8GB)/32GB(2x16GB) DDR4 Memory Advanced Technologies Storage Temperature: -20°C ~ 70°C Storage 1 16GB/32GB/64GB/120GB/240GB/500GB mSATA SSD Storage 2 500GB/1TB/2TB 2.5" SATA HDD Intel® Virtualization Technology (VT-x) Relative Humidity: 5% - 95% (non-condensing) 16GB/32GB/64GB/120GB/240GB/500GB 2.5" SATA SSD Intel® Virtualization Technology for Vibration: 0.5g rms/5-500HZ/random/operating Directed I/O (VT-d) Intel® VT-x with Extended Page Tables Others Enhanced Intel SpeedStep® Technology BIOS: AMI 64MB Flash ROM Thermal Monitoring Technologies Intel® Cooling: 1 x CPU FAN and 2 x Chassis FAN Flex Memory Access Watchdog: Support (L256, 0~255 seconds) Intel® Identity Protection Technology Intel® Smart Response Technology © Winston Marriot Limited. All rights reserved. sales@pondesk.com * All specifications and photos are subject to change without notice. United Kingdom Registered names and trademarks are the copyright and property of their respective owners. Hardware Performance NSHO-002 This section describes the real-world performance of network firewall router hardware with respect to multiple Firewall/Routing/All-In-One OS. There are many factors which influence the performance of firewall/routing etc. 1. Throughput 2. Features/Applications 3. Version of OS 4. Network Card Chipset 5. Number of Users 1. Throughput Traffic Load is very major part of performance notes, if there is less traffic then less load on device CPU & RAM with better performance. More traffic needs more processing and can reduce the through of appliance. 2. Features/Applications Most of features do not factor into hardware performance though a few have significant impact on hardware utilization. VPN: Heavy use of any of the VPN services included in pfSense, Untangle & Sophos etc. will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. - 266 MHz CPU will max out at around 4 Mbps of IPsec throughput - 500 MHz CPU can push 10-15 Mbps of IPsec - i7 CPU or Xeon new generation support 100 Mbps of IPsec traffic Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements. Squid – Squidguard: Outgoing traffic control through proxy both packages rely heavily both the CPU and disk writes. It is therefore strongly recommended to use with the Entry level and the use of AUTM and AUTM2 with DOM devices. For this kind of work is strongly recommended to use AUTM, AUTM2 and microcluster with SSD or classics disks. However, it is also possible the optimized use with only the squid package on the entry level as long as you turn off any kind of writing on the disk media and strong expense of performance. Captive Portal: While the primary concern is typically throughput, environments with hundreds of simultaneous captive portal users (of which there are many) will require slightly more CPU power than recommended above. Large State Tables: State table entries require about 1 KB of RAM each. The default state table, when full at 10,000 entries, takes up a little less than 10 MB RAM. For large environments requiring state tables with hundreds of thousands of connections, ensure adequate RAM is available. Packages: Some of the packages increase RAM requirements significantly. Snort and ntop are two that should not be installed on a system with less than 512 MB RAM. 3. Version of OS We must emphasize the difference between the two types of installations that you can do with pfSense and Untangle etc. on the different devices - The embedded solution (firewall Entry Level) does NOT allow the writing of log files on the memory (CF or DOM) and in any case, it is strongly discouraged. This version is not possible to install some additional packages of pfSense® and Untangle. - The solution that installs on your hard disk (usually on the UTM Appliance solutions or above) has the ability to save logs in it. On this version, you can install all additional packages provided for pfSense® and Untangle. 4. Network Card Chipset The choice of a network card is essential for anyone who is planning a system for medium / large dimensions. - The Realtek chipset is less powerful than Intel Chipset and is mainly suitable for workloads less intense. However, for a company that does not require high throughputs. - The Intel chipset, on the other hand, offers better performances in heavy traffic: it offers several advanced features such as queue management and, from the 2.2 version of pfSense, it also improved the multi-core support. This means a higher throughput and a reduced load on the CPU. 5. Number Of Users Firewall performance also dependent of number of users behind it, more users more state table entries and more hardware resources required. © Winston Marriot Limited. All rights reserved. sales@pondesk.com * All specifications and photos are subject to change without notice. United Kingdom Registered names and trademarks are the copyright and property of their respective owners. Real World Hardware Performance Statistics NSHO-002 Below mentioned are few real-world stress tests performed with different firewall OS on standard network firewall router box hardware with the following configurations. CPU: Intel® Core™ 3855U RAM: 8GB DDR4 Memory SSD: 60GB mSATA3 SSD pfSense® Untangle Number Of Users 500-1000 Users 500-1000 Users TCP 3800- 3910 Mbps* TCP 3900- 3970 Mbps* Bridge UDP 4000- 4100 Mbps* UDP 4000- 4200 Mbps* TCP 3800-3900 Mbps* TCP 3800-3850 Mbps* Routed UDP 3950- 4000 Mbps* UDP 3950- 3900 Mbps* TCP 3800-3870 Mbps* TCP 3900-3950 Mbps* NAT UDP 4000-4100 Mbps* UDP 4000-4300 Mbps* TCP 850-900 Mbps TCP 900-1000 Mbps AES128 UDP 950-1000 Mbps UDP 1000-1100 Mbps TCP 900- 910 Mbps TCP 880- 950 Mbps OpenVPN AES256 UDP 950- 980 Mbps UDP 950- 1000 Mbps TCP 900-980 Mbps TCP 950-980 Mbps Throughput Blowfish UDP 1000-1100 Mbps UDP 1000-1100 Mbps TCP 650-700 Mbps TCP 650-656 Mbps AES128 UDP 950-970 Mbps UDP 950-958 Mbps TCP 600-610 Mbps TCP 600-650 Mbps AES256 UDP 840-890 Mbps UDP 900-920 Mbps IPSec TCP 680-690 Mbps TCP 670-680 Mbps Blowfish128 UDP 960-980 Mbps UDP 960-970 Mbps TCP 105-110 Mbps TCP 110-120 Mbps 3DES UDP 110-125 Mbps UDP 120-125 Mbps TCP 1000-1250 Mbps TCP 1000-1200 Mbps L2TP GRE UDP 1200-1400 Mbps UDP 1200-1500 Mbps Max Active Connections 1.2 Million** 1.2 Million** Max Concurrent Sessions 0.9 Million 0.9 Million Max New Connections Per Second 50,000 50,000 Stateful Inspection 1.5 Gbps 1.5 Gbps IPSec Site-To-Site VPN Peers 300-700 300-700 Virtual Interfaces - VLANs 3,000 3,000 * Network Firewall Server has 6x1Gig Electrical Ethernet Ports, above stats are captured by using 6x1Gig for WAN and 6x1Gig For LAN, so total processing capacity calculated based on 6Gig link. ** These are not theoretical stats, these are real world stats, means generated at the time of full system load. You can consider them a minimum level of the number. You will get more than that in your environment. Note: Server ports are capable of handling more than 95% of hardware limit, like 950-980Mbps per port. Remember that this is real time hardware performance statistics captured during ideal environment. These might be different according to traffic load, complexity of configuration and processor/memory/storage specifications. Most important OS, if OS is more stable and have smaller footprint then performance should be high. © Winston Marriot Limited. All rights reserved. sales@pondesk.com * All specifications and photos are subject to change without notice. United Kingdom Registered names and trademarks are the copyright and property of their respective owners.
Enter the password to open this PDF file:
-
-
-
-
-
-
-
-
-
-
-
-