Almost a Decade in the Making Our Fanless Intel i3-N305 2.5GbE Firewall Review

31

Power Consumption

The CWWK unit we received had a Dajing power adapter. This had some markings and was a very heavy 60W 12V 5A unit.

CWWK N305 4x 2.5GbE Dajing ADP 60E2 60W Power Adapter
CWWK N305 4x 2.5GbE Dajing ADP 60E2 60W Power Adapter

The Topton unit came with an AcBel 60W power supply that was much lighter but that also had more markings on it such as being UL Listed (we did not check if this is true, but AcBel is a fairly well-known PSU vendor.)

Topton N305 4x 2.5GbE AcBel 60W Adapter 1
Topton N305 4x 2.5GbE AcBel 60W Adapter 1

Idle was in the 9-11W range in Proxmox VE 8. The system powered up to around 36W for around 36 seconds. The clock speed dips after the initial burst and it settles around 28-29W of power consumption and stays there.

One area we were a bit concerned about was the stability over time and cooling of these units. We ran stress-ng on the platform for 1 hour and over 24 hours. While the system got hot, and temps increased, it was still running in that 2.6-2.7GHz clock speed range.

CWWK Intel Core I3 N305 At 100 Percent 80 Min
CWWK Intel Core I3 N305 At 100 Percent 80 Min

Overall, this is more power than the older N5105 units, but we are also getting a lot more performance.

Key Lessons Learned

The performance jump from the Intel Core i3-N305 is awesome. We are talking 2-3x the performance of the N6005 which is almost unheard of. Intel is investing a lot in E-cores as it moves to big E-core-only chips with products like Sierra Forest in 2024, and we can see the direct impact of that investment here.

CWWK N305 Performance Compared To N100 N200 N6005
CWWK N305 Geekbench 6 Performance Compared To N100 N200 N6005

The Intel Core i3-N305 is E-core based, but it is now in the same range as the Intel Core i7-7700T 35W TDP part from a few generations ago.

The other big key lesson learned was around the expansion boards we discussed in the Internal Overview section. CWWK has realized that there is a market for these platforms beyond just low-cost firewalls and has an x86pi brand it is promoting along with new optional boards like this 4x M.2 to 1x M.2 2280 board, and the WiFi to M.2 SSD, mSATA, and SATA board we showed earlier.

CWWK M.2 Expansion Board 2 1
CWWK M.2 Expansion Board 2 1

Cooling with these expansion boards is a notable challenge, but the impact of these having more expansion options in the future cannot be understated. This is an exciting direction for the series.

Final Words

Overall, the new CWWK Intel Core i3-N305 fanless firewall device is starting to cross a boundary. We were able to do 2x 2.5GbE NAT streams on the previous generation, but this now has 2-3x the performance. If you saw our Beelink EQ12 Pro Review, this CPU is in the class of a desktop processor.

CWWK N305 4x 2.5GbE Rear
CWWK N305 4x 2.5GbE Rear

With 8-cores, it is the largest performance bump we have seen in the low-power consumer (formerly Atom) line that we have seen in a decade, if not ever. We would have liked to have dual-channel DDR5 memory and a few more PCIe lanes or just USB 3.0 on this platform, but for a firewall/ virtualization node, these are awesome.

CWWK N305 4x 2.5GbE Second M.2 Expansion SATA Board Installed
CWWK N305 4x 2.5GbE Second M.2 Expansion SATA Board Installed

It seems like we have done so many reviews of these systems. This is one where the units took some time to ship, but I have been surprised with the step function of improvement since they launched.

Where to Buy

If you want to find the units we purchased on AliExpress, here is the CWWK listing and the Topton listing. CWWK also now has an Amazon store where the N100 version is listed but the N305 is not yet.

Note: We participate in affiliate programs and these links may be affiliate links where we may earn a small commission if you purchase through them. They help support us in buying these units.

31 COMMENTS

  1. I promise I’ve been reading. I’ve known for months what a TF slot is. However – WTF is “a recessed G button” ???

  2. @Slash Its what you hit to turn the hot unit on.

    Any hint of these ever coming with ECC? Time for a new few devices but that last bit just seems like it no longer is in play.

  3. This cpu looks to be an amazing powerhouse with a thermal envelope that is reasonable. I have been looking for something like this since the day of the old atoms. Hopefully it ends up in a pot of devices

  4. Looks like where Huawei failed (to conquer network of democratic countries), CWWK is set to continue (at least from the SOHO side). And STH plays nicely along. Yet, a ton of alternatives exists either made in Taiwan (or if this is too close to P.R.C. for you) then even in EU (do not follow domestic makers in USA hence can’t mention that).
    What a pity…

  5. Regarding SATA data connector on H-Board – is on mainboard output for SATA power? And if so, is only 5V for laptop hdd or is also 12V for 3.5″ drives? Thanks

  6. Have you tested these N series processors with more than 16GB of RAM? There are some options in AliExpress offered with up to 32GB but Intel says they only support up to 16GB

  7. KarlG,
    It’s one thing to point out / remind people that networking devices from the P.R.C. might be compromised. It’s far different to accuse Patrick and STH of being complicit on their own site.

  8. If I’m a government trying to get into networks I’m not going after the customers buying $300 devices. I’m going after the Lenovo customers. Dell and HPE’s are made in China as well.

    I don’t know KarelG if you’re not shouting Lenovo is unbuyable by anyone on every website I don’t get what that is all about either like HerbM.

  9. Hello, I would be very interested in the review of the CWWK M.2 Expansion Board 2.1. For me, the ideal configuration is 1x 2.5 Gbit ethernet or 1x SFP+, 2-4x SATA and M.2 Expansion Board 4x NVME.

  10. If the OEM (CWWK?) would offer a CoreBoot BIOS it would help alleviate some of these conspiracy type theories that everything is a target.

  11. Today?

    Protectli have had 2.5Gb ports for a while now. I run one. Tbf, it’s a celeron, but it has more than enough oomph.

  12. I have no reference for CPU power needed for firewalls, are units with this CPU good enough for a 2man household office with bunch of 1gigabit wan traffic and 2.5gbe lan traffic?

  13. @ saeris – This is far in excess of what you would need. My previous gen J4125 is more than adequate and the N100 that replaced it can run the FW and 5-6 small VMs alongside it and still not use more than 10% CPU unless you start using intrusion detection etc.

  14. Would you be able to test the CWWK M2 expansion board in a different mini pc like the beelink pro? I’m really curious if the board would fit in other systems, maybe one that is more actively cooled.

  15. I know I’m a broken record, but how nice it would be if Intel would include vPro Advanced on these chips so that we could get remote controle without having to get an PiKVM. An Aspeed implementation will use too much power (7-9w).

  16. Would you recommend this unit instead of the i5-1235U in the same chassis for a proxmox server running a firewall (PFsense), a media server (PLEX) and a few other apps (Lidarr, Readarr, Sonaar etc) – to be used as a Home server?

  17. HerbM and heinrik: yes, HPE and Dell makes their devices in China too. In comparison with Lenovo and CWWK, their devices are still designed in free countries. Besides this HPE offer some supply-chain danger mitigation tactics — Patrick already wrote about it IIRC year ago or so. Those were special HPE servers build in US IIRC. You both seems to be concern by govs’ infra and leaving consumer infra free to P.R.C. Unfrotnately if large attack happen and your whole country consume infrastracture is in the hand of you r enemy, then well, I can only pray for your gov’s infra build with reliable/trusted components but running over the same cables…
    E.g. when flood happen, nobody is safe and tiping point may be quite close.
    So I would be careful even with simple consumer devices.
    Heck, on some other side you may read about car battery volt-meter made in P.R.C. using Bluetooth and app on Android/iOS to report battery health. This device is perfect spy as it scans wifis around and call back to China with what it found. It’s possible due to app requiring excess permissions for its core business. And that’s just silly device for few bucks. No imagine P.R.C. made EVs, what the hell may go wrong here…
    So be careful.

  18. Could you link to ram that works with this board? Typically manufacturers have a supported ram list, but not even sure how to look this up for these boards.

  19. I’m sorry but any board with the buggy I-225 or I-226 chipset is instantly a blocker. Google the chipset issues if you want to find out more, but they have been trying to fix it for three years now.

  20. Am I the only one furious that these Alder Lake-N CPUs exist, and yet Synology chose ancient Intel and embedded AMD trash for their ’23 refreshes?

  21. Not that anyone cares..

    using an M.2 breakout Adaptor to PCIe 3.0 x4 one can hook up some nice SFP+ Cards..
    in my case an Intel X520-DA2 10 Gigabit 10GBe SFP+

    it wont probably cut the same as a
    https://www.servethehome.com/this-gowin-r86s-pro-is-an-everything-revolution-with-25gbe-and-2-5gbe/4/
    provided that the card uses PCIe 2.0 x8

    but still, it adds some dearly missing dual SFP+ connectivity, far superior and more common than 2.5 GbE connectivity..

    It is a great N305 system, superior to the
    https://www.servethehome.com/new-4x-2-5gbe-and-2x-10gbe-intel-core-firewall-and-virtualization-appliance/4/

  22. A few weird items that make me feel off in using these for a firewall:
    – FreeBSD 14.0 and VMWARE 8.0u2 both show the presence of, but difficulty connecting to the TPM 2.0 module. This is a serious red flag for hardware capable of manipulating or snooping on secure traffic keys, such as VPNs and browser SSL
    – Units shipping today still have BIOS containing the LogoFail vulnerability; the company has not published an update to fix this and other major BIOS and ME issues
    – When clicking the CWWK website’s support link, Norton blocks the link due to suspicious activity
    – CWWK neither has non-Chinese language manuals or support sites hosting BIOS and Firmware outside of China. This is a significant software supply chain concern, as the CCP and state-sponsored hacking groups have ongoing access to manipulate software (See Double Dragon, APT41, BARIUM, Axiom, Winnti, Wicked Panda, Wicked Spider, TG-2633, Bronze Atlas, Red Kelpie, Blackfly, Brass Typhoon, … )

  23. Anyone know how to disable the SD reader. I have no idea where else to ask, but it seems that may be a fix for higher than expected iowait, I have gone over each bios setting and cannot see to find anything. If anyone has any ideas please let me know.

  24. In case anyone ends up here looking for the same as card solution. I just ended up putting a SD card in the slot and the Iowait went away. Apparently you don’t have to use it just have something in the slot.

  25. I took the recommendation to buy two of these systems and am quite disappointed. Only one of them works properly. One is missing half of its network PCI devices. The support site is horrible–even if you can manage translating the chineese to figure out what is going on.
    The BIOS and UEFI appear broken; many setting changes are not saved. I’ve worked as an engineer for companies that ship servers, so I know my way around, but even I couldn’t figure out how to get this device to work properly. For now I have one sketchy server that works, and one that only half works.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.