High-performance Software Router
Industry-leading price-performance, scalability, and solution flexibility for all edge, campus, data center and cloud router and site-to-site VPN needs.
TNSR has the benefit of a data plane that leverages Vector Packet Processing (VPP) and the Data Plane Development Kit (DPDK) in user space to produce blinding secure networking speed relative to traditional kernel-base approaches. That said, solution performance remains a function of the underlying hardware platform (Netgate appliance, VM, cloud instance), the nature of the network traffic, and the desired level of security enforcement.
Each of the following factors can affect the throughput of your pfSense Plus solution:
The faster the CPU, and the more memory at its disposal, the more traffic a TNSR instance can process.
Throughput is often couched in Mbps or Gbps. But a more important measuring stick is packets per second. Smaller packets translates to more packets per second, and large packets translates to fewer. IMIX is a good real-world benchmark. We openly share TNSR test results for all three.
Unencrypted traffic is easier to process, but also has no security. Encrypted traffic takes processing cycles, and encryption schemas vary in their impact on processing speed.
Depth and breadth of access control lists (ACLs) will place a tax on packet processing performance.
A Guideline: TNSR on a Netgate Appliance
Given the above, we can't say what your exact performance will be. But, we can give you a benchmark for general competitive comparison. The diagram below shows performance figures for our largest appliance, the Netgate 1541, running iperf3 traffic through TNSR 21.03.
As you can see TNSR pushes the Netgate 1541 to its hardware-based performance limits of roughly 19 Gbps. But, TNSR itself is only limited by the underlying hardware. Give it enough CPU and memory, and the software easily scales to 100 Gbps and beyond.
For performance data on other appliances, view our Netgate appliances carousel.
The Impact of Hardware Platform on Performance
Netgate offers a range of turnkey appliances - built, preloaded with TNSR software, and tested to specification right in our own factory. See our convenient product comparison chart to select the performance that best meets your needs.
Some customers prefer to source their own hardware, and that is fine. There are plenty of options. If you are using TNSR on your own hardware you will need to, on your own, assess both compatibility and performance. In addition to CPU and memory variants, BIOS settings, disk configurations, and NICs will all affect performance.