TP-Link Archer MR200 - VPN performance

I found these:

Can that be something? Should handle 100mbit openvpn?

Can have site to site with pfsense and openvpn then.

I, personally, wouldn't buy a cheap, import, such as the "New Qotom-Q150P Fanless X86 Desktop computer Intel Baswell Processor N3150 qual-core 1.6 GHz,Up to 2.08 GHz" you linked, especially from a seller that you have no meaningful recourse from. You can read further opinions on the pfSense boards.

A N3150 is pretty outdated at this point (2015 release).

N3150 single-core Passmark, as one point of reference, is 471
By comparison, a J4105 is 1070

You can buy a SBC like the ODROID H2 for a comparable price, with a J4105, with what I consider good support and, at least based on the other ODRIOD products I've owned, good layout and fabrication.

1 Like

The ODROID-H2 hardware was interesting!

So these hardware shall be able to give me 100mbit ++ on OpenVPN?

Hardware to these mainboard:

Kingston A400 120GB 2.5" SSD ???

how much do I need ?

Cabinet: ???

Something more I need?

Thank you all for your inputs!

I have a question when it comes to Openwrt.

I will use the TP MR200 to get access to the 4G network and then send all traffic further to the pfsense box.

What settings should I have on the TP MR200 running OpenWRT to make these happens in a good way? I understand the default OS on the TP MR200 is not supporting bridge mode, but OpenWRT can?

Its semi brigde mode I need?

It sounds like you considering the H2 for running pfSense, with OpenWrt handling the modem.

I don't run pfSense myself, but extensively run FreeBSD, on which pfSense is built. I've got an H2 arriving today so will be able to comment more on the case in a day or two. I went with the Type 3 case as I'll be mounting two SSDs in it.

My application is probably a lot more demanding than yours as I will be building packages on the box, something that just takes too long on my APU3C4 units. Still, for FreeBSD, I'd recommend that you use ZFS on a two-way mirror (or better). An absolute minimum of 4 GB of RAM, with 8 GB comfortable (2x 4 GB sticks) for day-to-day operation. I've been running on ZFS for years now, and its advantages for stability and maintainability (such as "instant" live snapshots) are significant. 250 GB SSDs seems to be the smallest you can buy from a major manufacturer (I use Corsair and Samsung units), running $40-50 each. has some interesting numbers for guidance. The Kingston units seem reasonable, especially at the US$20 price point. With low-end drives, mirroring provides a bit more confidence.

Thank you, it’s not any problem using OpenWRT as a modem?

Are you planning to run OpenWRT on the ODROID-H2, what benefits are that giving you?

It has been reported issue with NIC:

OpenWrt can handle many modems quite well. I don't know if it can be configured to have your downstream box deal with the DHCP, but there is the range of options between selective ports to forward (if any) and full, one-to-one "DMZ" to your downstream box. I do something similar where my modem-connected box handles the DHCP, NATs to the fixed address of my next router, provides nftables firewalling, and forwards everything to my inner firewall. This lets the inner firewall use fixed rules, as its interfaces never change address.

I select an OS based on what the application is and how well it fits that application and hardware. The specific application that drove my H2 purchase is a FreeBSD-based server that runs my primary services in jails. The APU3C4 was great for day-to-day use. Some of the packages need non-default settings, so I need to build them myself. The APU3C4 takes tens of hours and, based on my experience with J1900 and 1037U, I would expect this to drop to a reasonable period of time. This means one less box consuming power, even if only 10-15 W.

Yes, Realtek NICs aren't as robust as Intel, Chelsio, Mellanox, or the like. Then again, those cards, if genuine and not "clones", cost more than the H2.

1 Like

I have now purchased the H2, case, memory, SSD :slight_smile:
Looking forward to recive parts :slight_smile:

I will use the TP router as a modem by using bridge/DMZ and then the new hardware as a router/VPN Server with pfsense software.

I will then end up with Site to Site OpenVPN (pfsense in both ends) hope I will be happy with the performance.

1 Like

Got mine somewhat put together last night -- one hitch

Only NVMe drives work in the M.2 slot

The Kingston A400, with its SATA interface, will not work.

so the old Corsair I had sitting around didn't work. Yes, it's clearly documented, but I failed to check the drive before assembling everything.

Finding a 2.5" SSD to tuck in there next.

Most of the pieces of the Type 3 case are not symmetric, and I somehow managed to get at least two of them assembled "upside down". There are YouTube videos for the assembly of the case, as well as the power switch. The one trick on the power switch video was how to coil the wiring neatly. Here's the pin connections

1 Like

Have you been able to test more, performance?

The package is shipped now, looking forward to open up the package :slight_smile:
Christmas time :slight_smile:

Currently testing with Debian to get a handle on things and what drivers are needed.

Installed r8168-dkms and firmware-realtek. The NICs run without either, no matter what the dire warning suggests.

iperf3 at 940 Mbps, which is basically the throughput limit of GIgE, from what I understand. Routing and/or VPN not yet tested.

lm-sensors detects and reads (here at idle, without fan)

jeff@deb-h2:~$ sensors
Adapter: SMBus I801 adapter at f040
fan1:           FAULT  (div = 8)
temp1:        +42.5°C  (low  =  +0.0°C, high = +85.0°C)
temp2:        +42.5°C  (low  =  +0.0°C, high = +85.0°C)
temp3:        +42.9°C  (low  =  +0.0°C, high = +85.0°C)

Adapter: ACPI interface
temp1:        +45.0°C  (crit = +95.0°C)

Adapter: ISA adapter
Package id 0:  +45.0°C  (high = +105.0°C, crit = +105.0°C)
Core 0:        +45.0°C  (high = +105.0°C, crit = +105.0°C)
Core 1:        +45.0°C  (high = +105.0°C, crit = +105.0°C)
Core 2:        +45.0°C  (high = +105.0°C, crit = +105.0°C)

A fan is definitely needed if you're going to push it hard.

I stopped when the CPU temp crossed 75°C

I'm using a Noctua NF-A9. Running tests on 12 V to start, as I don't have an adapter from the non-standard fan connector yet. I'll try at lower voltages as well. I haven't checked for an EMC2103 driver yet in the OpenWrt tree/packages, though there is one in upstream Linux. BIOS is another option, though I like to run as quiet as I can.

Looks like even 5 V on the Noctua NF-A9 is enough (~67 °C), though 7 V is better (~64 °C).

Note to anyone reading this in the future -- the schematics suggest that it is a 5 V fan that is needed to run off the on-board connector -- to be confirmed

firmware-realtek is needed for a small subset of chipset revisions supported by r8169, in most cases even those that do use the provided firmware don't hard-depend on its presence (the firmware package is hot-patching sub-optimal on-device firmware, often related to interoperability in corner cases, such as long lines or combinations with other quirky devices).

The out-of-tree r8168-dkms package should never be necessary, r8169 is supposed to cover all recent RealTek cards - you basically just replace one set of bugs with another, at the price of having to deal with a …vendor driver.

1 Like

No FreeBSD yet? You also probably want to use powerdxx from ports btw :wink:

1 Like

When you different voltage, these is overclocking in the bios? I’m not so technical so was following of what you writing :slight_smile:

If I use default settings I can have 100% load on the cpu without heat problems, if the clmputer is in a open room?

Or should I install a fan on top of the cabinet blowing down on the colling ribs to the CPU?

I only have 80mbit/80mbit line so I guess I will run on low number of CPU load in Pfsense?

Those are the voltage supplied to the fan using a bench power supply. I’m not using the onboard connector or BIOS control as I don’t have the proper plug yet for my fan yet. 5 V is “slow” and 7 V is “medium”.

I’d watch CPU temperature if you run without a fan. I was testing with all four cores at full bore doing compilation. 80 Mbps VPN may be a significant load, as would be an IDS or the like.

Given my experience with running all four cores at 100% without a fan (~80 °F / 25 °C room), not without having the CPU go into thermal protection. A small desk fan may be enough, though a fan pulling hot air out of the case would be my preference.

I understand :slight_smile:
I will use a fan then, some noice is not any problem.

If i connect the fan to the main board, I guess it will be regulated accordoing to the temperature on the CPU?

Did you figure out type of connector? I will also see if I can figure out.

I’ll open up a separate thread on the H2 later. Quickly, I believe it is a Molex PicoBlade connector.

1 Like

Have you figure out the connector to the fan?

I also want to install a permanent fan and is out of stock and could not give me a date when they recive more...

Mini. Micro 1.25mm JST T-1 4-Pin Connector