Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm going to use a FreeBSD system as a loadbalancer which routes 1gbps public traffic to back-end webserver cluster. What are the minimum hardware specs for this job?


share|improve this question
Packets Per Second would be a much better measure of routing necessity at this level. – Chris S Dec 7 '10 at 2:52
up vote 6 down vote accepted

The minimum hardware specs for load-balancing 1gbps of web traffic is ... irrelevant. If you put the smallest hardware in there, and you experience even a small denial of service attack, the machine will likely be so busy that it's impossible to respond to the attack.

My experience has been that I want to put pretty much the most powerful box in there that I can. For example, one I'm running a Core i5 3.5GHz dual core CPU...

It really depends on what kind of load-balancing you are doing. If it's simply kernel-level IPVS, that's going to require much less horsepower than doing something like HAProxy. And then it depends on what exact configuration of HAProxy, how many regexes you are applying to the requests, etc...

So, while you may still want to figure out the minimum hardware, I'd recommend that you seriously over-provision the box.

share|improve this answer
Thanks for answer. I'm currently using i7 920. Thought it's overkill; but I haven't measure DDoS. – Jeff Dec 7 '10 at 3:49
I deliberately chose the i5 because it had a higher clock and I really only need 1 core for work (the second core available for administrative use). We use Linux and a single Ethernet interface to limit the impact to a single core, but we also aren't doing any layer 7 sort of work, so we don't need multiple cores. This is also on Linux, I'm not as familiar with FreeBSD and how exactly it allocates network handling across CPUs. – Sean Reifschneider Dec 7 '10 at 4:18

If it is not going to do SSL decryption almost any piece of hardware built in the last 5 years will be able to saturate a GB NIC. Stick with something new enough you trust its reliability since this is a pretty critical piece of hardware.

share|improve this answer

As Sean mentioned it would be dependent on the type of Load balancer you use.

Layer 7 load balancers like HA-Proxy are typically more CPU hungry because the load balancer kind of partially processes a request before handing it over to the backend. They are similar to rever proxies.

Layer 4 load balancers. I personally like this. At my previous work place we handled Gbps traffic with a single dual core xeon. That was the cheapest one available. The only requirement was RAM. We were using 4Gb of RAM out of which 50% of which was not used most of the time.

This link will help you understand the different types of loadbalancers

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.