Do you mean that this revision cannot be fixes by software to use IPSec Hardware encryption?

If yes you have to think about money return, because this look like aaaaa veerry huge fraud. We are discussing this routerboard 8 months, and suddenly you are telling us that this is not real? Really ?

Do you mean that this revision cannot be fixes by software to use IPSec Hardware encryption?

If yes you have to think about money return, because this look like aaaaa veerry huge fraud. We are discussing this routerboard 8 months, and suddenly you are telling us that this is not real? Really ?

It was never advertised and not in any manual or specification sheet. Only one mistaken post in a user forum.

Software can't "fix" this because the CPU needs to be different.

I was relying on this info about ipsec acceleration and just ordered two units I need for ipsec ... Hopefully my distributor will return the money! When can we expect hardware accelerated versions of rb850gx2? CCR is not an option for me because of fan noise!

i also ordered based on this information. I am trying to cancel my order.

Boys, are you really not reading device's official specs befor ordering ?
Have you read this ? http://wiki.mikrotik.com/wiki/Manual:IP ... encryption

Boys, are you really not reading device's official specs befor ordering ?
Have you read this ? http://wiki.mikrotik.com/wiki/Manual:IP ... encryption

"What a mistake-a to make-a!"

However there are some mitigating circumstanses. It it is new and the manual is not always up to date. Next to this I have found the information from Normis in the past to be reliable.

I am not Mikrotik's Advocatus Diaboli but IMHO if I am not 100% sure about specs the red light should start flashing in my head to double check infortmation, especially if "this one post" have no confirmation elsewhere.

First revision of RB850Gx2 will not have a IPsec encryption accelerator, as initially posted in this thread

Normis ... can you please answer these questions:

1. Is there going to be a revision of RB850Gx2 with IPsec encryption accelerator ?
2. When can we expect such a revision?
3. Will future revisions of RB850Gx2 still be fanless?
4. any other changes planned for future revisions that are not going to be included in first revisions (jumbo frames for example) ?
5. What IPsec throughput can we expect from the first revisions of RB850Gx2 without accelerator?

tnx in advance ...

JF.

I think it would be easier to see a desktop version of RB1100x2.

First revision of RB850Gx2 will not have a IPsec encryption accelerator, as initially posted in this thread

Normis ... can you please answer these questions:

1. Is there going to be a revision of RB850Gx2 with IPsec encryption accelerator ?
2. When can we expect such a revision?
3. Will future revisions of RB850Gx2 still be fanless?
4. any other changes planned for future revisions that are not going to be included in first revisions (jumbo frames for example) ?
5. What IPsec throughput can we expect from the first revisions of RB850Gx2 without accelerator?

tnx in advance ...

JF.

1. yes
2. hard to say, possibly within 6 months, but that is a wild guess
3. yes
4. hard to say, nothing specific at the moment
5. similar to any un-accelerated CPU at this frequency.

5. ~150-200Mbps

First revision of RB850Gx2 will not have a IPsec encryption accelerator

Wow... I've been waiting all year for this!

5. ~150-200Mbps

That would be great. It's more than most routers do with hardware encryption enabled.

5. ~150-200Mbps

I have tested all types of encryption and the max I have achieved is 20mbps.

What settings you have used ?

5. ~150-200Mbps

I have tested all types of encryption and the max I have achieved is 20mbps.

What settings you have used ?

Agreed. The IPSEC performance is awful. Both with PPPoE and L2TP I also only get about 20mbps. Am going to try to return these things. My RB951G-2HnD outperforms them.

I am seriously disappointed, I bought this because HW accel (or at least good IPSEC performance) was advertised in this forum:

We have currently tested IPsec on the RB850Gx2, and the result is 550MBps with 1470 byte packets

5. ~150-200Mbps

I have tested all types of encryption and the max I have achieved is 20mbps.

What settings you have used ?

Tunnel mode, aes-128, sha1, UDP traffic with 1450byte packets

Tunnel mode, aes-128, sha1, UDP traffic with 1450byte packets

OK, Great ! What about TCP ? Same settings ? Please share the result.

First revision of RB850Gx2 will not have a IPsec encryption accelerator, as initially posted in this thread

Normis ... can you please answer these questions:

1. Is there going to be a revision of RB850Gx2 with IPsec encryption accelerator ?
2. When can we expect such a revision?
3. Will future revisions of RB850Gx2 still be fanless?
4. any other changes planned for future revisions that are not going to be included in first revisions (jumbo frames for example) ?
5. What IPsec throughput can we expect from the first revisions of RB850Gx2 without accelerator?

tnx in advance ...

JF.

1. yes
2. hard to say, possibly within 6 months, but that is a wild guess
3. yes
4. hard to say, nothing specific at the moment
5. similar to any un-accelerated CPU at this frequency.

Can we get some info about second revision? It is almost 3 months since your post.

First revision of RB850Gx2 will not have a IPsec encryption accelerator, as initially posted in this thread

Normis ... can you please answer these questions:

1. Is there going to be a revision of RB850Gx2 with IPsec encryption accelerator ?
2. When can we expect such a revision?
3. Will future revisions of RB850Gx2 still be fanless?
4. any other changes planned for future revisions that are not going to be included in first revisions (jumbo frames for example) ?
5. What IPsec throughput can we expect from the first revisions of RB850Gx2 without accelerator?

tnx in advance ...

JF.

1. yes
2. hard to say, possibly within 6 months, but that is a wild guess
3. yes
4. hard to say, nothing specific at the moment
5. similar to any un-accelerated CPU at this frequency.

Can we get some more info about second revision? It is almost 3 months since your post.

First revision of RB850Gx2 will not have a IPsec encryption accelerator, as initially posted in this thread

Normis ... can you please answer these questions:

1. Is there going to be a revision of RB850Gx2 with IPsec encryption accelerator ?
2. When can we expect such a revision?
3. Will future revisions of RB850Gx2 still be fanless?
4. any other changes planned for future revisions that are not going to be included in first revisions (jumbo frames for example) ?
5. What IPsec throughput can we expect from the first revisions of RB850Gx2 without accelerator?

tnx in advance ...

JF.

1. yes
2. hard to say, possibly within 6 months, but that is a wild guess
3. yes
4. hard to say, nothing specific at the moment
5. similar to any un-accelerated CPU at this frequency.

Can we get some more info about second revision? It is almost 3 months since your post.

Easyli buy from Exar some smaller crypto Chips and then solder them on each non-Tilera based RouterBoard and we get even on all RouterBoards hardware crypto acceleration for VPN!

Once integrated it can be even used. Or a plain miniPCI for older Boards and a miniPCIe vpn card
for newer RouterBoards so each of us can be buy one if he is needing.

5. ~150-200Mbps

I checked ipsec throughput RB850Gx2 with ROS 6.28
With routing and some firewall rules:
receiving 120-125Mbps
transmission 112Mbps

Without routing and filtering I believe that will be close to 150Mbps

Latest Mikrotik news 66 states that RB850Gx2 devices will now start shipping with HW encryption accelrated CPU. And 500Mbps AES througput should be achievable, sound like great news!

Left to repair fasttrack and fastpath

Latest Mikrotik news 66 states that RB850Gx2 devices will now start shipping with HW encryption accelrated CPU. And 500Mbps AES througput should be achievable, sound like great news!

It would be grate to have real life test... Site to site ipsec with a GRE tunnel in it and routing between networks...

Shouldn't it be similar to those of rb1100ahx2?
Rb1100ahx2 is able to take up to 500 mbps.

It is only encryption performance. RB1100ahx2 roughly twice as powerful. I doubt that you will get so much on RB850Gx2 due to other restrictions.
However in VPN range 100-300mb/s this router must be good.

Of course.

What encryption standards supported Hardware Accelerator?
In addition to the AES128

IMHO the new RB850Gx2 with hardware encryption should have been called RB851Gx2

Now If we want to buy the improved version of RB850Gx2 we need to ask our provider to know it's serial number

IMHO the new RB850Gx2 with hardware encryption should have been called RB851Gx2

Now If we want to buy the improved version of RB850Gx2 we need to ask our provider to know it's serial number

"1" in the end will indicate that it has a wireless slot or card. + each change in product code results in new government certification for us, to import that product, so i'm against changing any names, especially in cases when there are no physical differences between boards.

850gx2AH or 850ghx2

I thought about the H, but I don't think the CPU is more powerful in general.

I think K would be good.

"1" in the end will indicate that it has a wireless slot or card. + each change in product code results in new government certification for us, to import that product, so i'm against changing any names, especially in cases when there are no physical differences between boards.

That's a good reason, but mind on customers. Now we have a problem due to this unchanged name of product. I see others manufacturers add a v2 or hardware spec 2 when they do a change like this.

The vortex suggestion of the K element in the name for future products it's a good idea.

That's a good reason, but mind on customers. Now we have a problem due to this unchanged name of product. I see others manufacturers add a v2 or hardware spec 2 when they do a change like this.

The vortex suggestion of the K element in the name for future products it's a good idea.

This is just one small feature, and for 95-99% of customers it will be totally no difference. But those 1-5% that need it usually will know exatly what to look for in serial number.

This is just one small feature, and for 95-99% of customers it will be totally no difference. But those 1-5% that need it usually will know exatly what to look for in serial number.

What's a big or small feature is subjective to everyone's needs.

By that logic all routerboards should have the same model number and change the serials if you want a 2nd mini-pci or a second ethernet port or integrated wifi.

It's just bad business. Why, as a customer, should I have to contact my distributor asking for serial numbers and all that nonsense?

Also, if that was done to avoid new certifications I am not sure if that's "legal". So you get a certification for device A, you then change the most important chip on it (the CPU!!) and then sell it with the same name/model?
How would the certification bodies know that the device operates how it should since a new cpu is on it?

Has anyone been able to conduct IPSEC throughput tests on the new RB850Gx2 with HW acceleration? My local supplier is already selling them with the new serial but I'm hesitant to buy them for new projects just for this feature yet.

First part of review RB850Gx2
http://lanmarket.ua/stats/obzor-Mikrotik-RB850Gx2

Part two have ipsec and l2tp performance test. Coming soon.

First part of review RB850Gx2
http://lanmarket.ua/stats/obzor-Mikrotik-RB850Gx2

Part two have ipsec and l2tp performance test. Coming soon.

The best MT reviews I've ever seen...
Keep going

I'm eager to see second part, and espetially if there is chance to compare with ubnt edgerouter x NAT/IPSec.

English translation of DmitryAVET link
http://www.microsofttranslator.com/bv.a ... k-RB850Gx2

Part 2, RB3011 vs RB850Gx2
http://lanmarket.ua/stats/testirovanie- ... 011UiAS-RM

RB850Gx2 in middle between old RB2011 and new RB2011.

Try to test without fragmentation, you should get better ipsec results.

Part 2, RB3011 vs RB850Gx2
http://lanmarket.ua/stats/testirovanie- ... 011UiAS-RM

RB850Gx2 in middle between old RB2011 and new RB2011.

Thanks for the test results.

I think the results would be more realistic if 2 RB850Gx2 where used for IPSec instead of RB850Gx2 <> RB3011.
This way you get clear RB850Gx2 performance without any (potential) bottlenecks on the newly released RouterOS for ARM arch.
Also inclusion of 'Tools > Profile' and the CPU window from 'System > Resources' in your screenshots would give the reader more insight on what's going on performance wise during the tests.

I am thinking of replacing my long lived x86 router with a RB850Gx2 but I can't find any decent tests published to make up my mind if it will be able to handle the IPsec tunnels and overall traffic I need it for.

Part 2, RB3011 vs RB850Gx2
http://lanmarket.ua/stats/testirovanie- ... 011UiAS-RM

RB850Gx2 in middle between old RB2011 and new RB2011.

I think the results would be more realistic if 2 RB850Gx2 where used for IPSec instead of RB850Gx2 <> RB3011.

Sorry, but I have just one RB850Gx2.

Do you known if rb850 supports mSD-XC cards? What is maximum supported mSD-HC / mSD-XC card size?