Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Questions about my ideal setup

    Scheduled Pinned Locked Moved General pfSense Questions
    59 Posts 9 Posters 10.6k Views 6 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S Offline
      stephenw10 Netgate Administrator
      last edited by

      It can route at >1Gbps (L3 forwarding) but it can't firewall/NAT at that rate.

      At 60Mbps it would of course have no problem!

      Sergei_ShablovskyS 1 Reply Last reply Reply Quote 1
      • Sergei_ShablovskyS Offline
        Sergei_Shablovsky @stephenw10
        last edited by stephenw10

        @stephenw10 said in Questions about my ideal setup:

        It can route at >1Gbps (L3 forwarding) but it can't firewall/NAT at that rate.

        At 60Mbps it would of course have no problem!

        Anyway after reading all posts I more than sure that fanless top-box with Intel / ARM 64bit CPU and 16Gb RAM would be great for start, or just buy one from Netgate (for example Netgate 2100 Max) for USD$345+shipping.

        You need something to start with.
        Only after a You start to play, you understand what You exactly need.

        —
        CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
        Help Ukraine to resist, save civilians people’s lives !
        (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

        JKnottJ 1 Reply Last reply Reply Quote 1
        • JKnottJ Offline
          JKnott @Sergei_Shablovsky
          last edited by

          @sergei_shablovsky

          That Qotom mini PC I bought (see sig) should do the trick. I've already downloaded over 900 Mb with it.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          W 1 Reply Last reply Reply Quote 0
          • W Offline
            Waqar.UK @JKnott
            last edited by Waqar.UK

            @jknott

            True.
            I have the Qotom, so far so good: i5, 8GB RAM and 120GB SSD.
            On Virgin media I get on my official 200-20 connection: sometimes 230-22 via Ethernet.
            AP: Asus RTAX 88U. Across my semi detached house I get 220-21.
            Running Suricata as an add on and CPU barely touches 1%.

            Community fibre are offering me 3Giga-bit for £99. But all my hardware is "only" 1 Gig-bit.

            If anyone wants a good value machine that will handle everything up to 1 gig-bit, then Qotom is the way to go. Small and power efficient. Yes I use active cooling and even during rare hot summers in London its CPU rarely goes above 45 Celsius.

            J stephenw10S 2 Replies Last reply Reply Quote 0
            • J Offline
              JT40 @Waqar.UK
              last edited by

              @waqar-uk Nice setup, but it's gonna consume a lot of energy...
              At this point, it's simple X86 HW, I just noticed, I'm better of building something by myself, I just need to be careful with the compatibility of the network card and try to find a case that has at least 4 ethernet ports :D
              Do you agree?

              W 1 Reply Last reply Reply Quote 0
              • stephenw10S Offline
                stephenw10 Netgate Administrator @Waqar.UK
                last edited by

                @waqar-uk said in Questions about my ideal setup:

                Community fibre are offering me 3Giga-bit for £99

                Grr. I'll have probably retired by the time fibre reaches my part of London. 😞

                1 Reply Last reply Reply Quote 0
                • J Offline
                  JT40
                  last edited by JT40

                  I'm browsing around, but it's a bit difficult to find good hardware 🐶 , used or new...

                  I live in UK, so the import tax from EU is something I need to avoid, I need to buy in UK but it's not that easy...

                  I found this hardware, am I on the right way?

                  • ASRock H310CM-HDV, 1151, MATX, 2 DDR4, DVI, VGA, HDMI, GB LANASRock H310CM-HDV, 1151, MATX, 2 DDR4, DVI, VGA, HDMI, GB LAN

                  • Corsair CMK8GX4M1A2400C16 Vengeance LPX 8 GB (1 x 8 GB) DDR4 2400 MHz C16 XMP 2.0 High Performance Desktop Memory Module, BlackCorsair CMK8GX4M1A2400C16 Vengeance LPX 8 GB (1 x 8 GB) DDR4 2400 MHz C16 XMP 2.0 High Performance Desktop Memory Module, Black

                  • Intel Core i5-9400F 2.9GHz LGA1151 9M Cache BOX CPUIntel Core i5-9400F 2.9GHz LGA1151 9M Cache BOX CPU (it may be overkill and TDP too high, I'll try to find a less performance CPU, something like 35W max)

                  • CiT MTX008B PC Case, Mini ITX, CE/EMI Approved Design, Game Max TFX 300W Power Supply Included, 80mm Front Fan Included, Designed With The Professional In Mind | Black

                  Looking at the PfSense doc, it's supported hardware so far...

                  It's already 290 pounds, maybe other 30 for the power supply and I'm done. I wish.... :D
                  I miss the network card, probably the most expensive component, from where do I start??

                  At this point, I ask myself why don't buy a Netgate box, like Netgate 2100... Looking at the performance declared, it's overkill for me...
                  Or do you want to tell me that plugins etc are gonna put down such box around 100 Mbit??
                  I'll use SNORT and Surricata minimum...

                  Sergei_ShablovskyS W 3 Replies Last reply Reply Quote 0
                  • stephenw10S Offline
                    stephenw10 Netgate Administrator
                    last edited by

                    You should not use Snort and Suricata at the same time. They do the same task.

                    The 2100 would have no problems running either at 100Mbps.

                    Steve

                    1 Reply Last reply Reply Quote 0
                    • Sergei_ShablovskyS Offline
                      Sergei_Shablovsky @JT40
                      last edited by

                      @jt40 said in Questions about my ideal setup:

                      I'll use SNORT and Surricata minimum...

                      For what You definitely need SNORT / Suricata ?

                      This systems mostly used in office / enterprise environment and needs.

                      —
                      CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                      Help Ukraine to resist, save civilians people’s lives !
                      (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                      1 Reply Last reply Reply Quote 0
                      • Sergei_ShablovskyS Offline
                        Sergei_Shablovsky @JT40
                        last edited by

                        @jt40 said in Questions about my ideal setup:

                        At this point, I ask myself why don't buy a Netgate box, like Netgate 2100... Looking at the performance declared, it's overkill for me...

                        According to what most users wrote here on forum, they quickly goes from “this is overkill to my needs” to “why I not spend a +$80 at beginning to avoid some problems / impossibilities now” :)

                        —
                        CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                        Help Ukraine to resist, save civilians people’s lives !
                        (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                        J 1 Reply Last reply Reply Quote 0
                        • W Offline
                          Waqar.UK @JT40
                          last edited by

                          @jt40

                          https://www.asrock.com/mb/intel/h310cm-hdv/index.asp#Specification
                          ASRock H310CM-HDV

                          LAN
                          1 x Realtek RTL8111H

                          So you need a Intel based Ethernet card.

                          I do not think my setup consumes a large amount of electricity,
                          PFsense box is small and efficient and Asus RT-AX 88U barely gets warm.

                          1 Reply Last reply Reply Quote 1
                          • J Offline
                            JT40 @Sergei_Shablovsky
                            last edited by

                            @sergei_shablovsky said in Questions about my ideal setup:

                            @jt40 said in Questions about my ideal setup:

                            At this point, I ask myself why don't buy a Netgate box, like Netgate 2100... Looking at the performance declared, it's overkill for me...

                            According to what most users wrote here on forum, they quickly goes from “this is overkill to my needs” to “why I not spend a +$80 at beginning to avoid some problems / impossibilities now” :)

                            Ahaaha, that's how it goes :D

                            Before this post, I could not think to spend so much for a router...
                            Apparently, I have no choice, the minimum is 280 pounds, now the choice is on Netgate or a custom build.
                            What I can say about the custom build is that it's much more powerful than Netgate, which is probably what I need in the future (not tomorrow morning), plus I can also re-use that machine to do something else if I need to, which is great, it's X86 powerful HW in the end.

                            Components have been published above, I just need some recommendation on the network card.
                            Good ones are around 150 pounds, but I really don't know which one to pick up.

                            Sergei_ShablovskyS 1 Reply Last reply Reply Quote 0
                            • J Offline
                              JT40
                              last edited by

                              I found this one: Intel X710-da2 , it seems enough for me, I would love to have more ports but it's very difficult to find network cards that have more than 2 ports for my wallet :D .

                              Based on the recommendations written here: https://www.servethehome.com/buyers-guides/top-hardware-components-pfsense-appliances/top-picks-pfsense-network-cards-nics/

                              Sergei_ShablovskyS 1 Reply Last reply Reply Quote 0
                              • Sergei_ShablovskyS Offline
                                Sergei_Shablovsky @JT40
                                last edited by Sergei_Shablovsky

                                @jt40 said in Questions about my ideal setup:

                                @sergei_shablovsky said in Questions about my ideal setup:

                                @jt40 said in Questions about my ideal setup:

                                At this point, I ask myself why don't buy a Netgate box, like Netgate 2100... Looking at the performance declared, it's overkill for me...

                                According to what most users wrote here on forum, they quickly goes from “this is overkill to my needs” to “why I not spend a +$80 at beginning to avoid some problems / impossibilities now” :)

                                Ahaaha, that's how it goes :D

                                Before this post, I could not think to spend so much for a router...

                                ;)

                                Apparently, I have no choice, the minimum is 280 pounds, now the choice is on Netgate or a custom build.
                                What I can say about the custom build is that it's much more powerful than Netgate, which is probably what I need in the future (not tomorrow morning), plus I can also re-use that machine to do something else if I need to, which is great, it's X86 powerful HW in the end.

                                Try to look at the NetGear 2100 Max from that point of view:

                                • time running fast and computers/parts price goes down quickly. So no reason long-term investing in HW in SOHO segment;
                                • much less power consumption (You point that electricity bills is important to You, because for example even old server with 2 x ~550W PSU (minimum for any rack server) eating ~ 250-300W / h, 24/7/365);
                                • stable and proven by NetGate configuration;
                                • not need to spend a months on NIC tuning, OS tuning, etc... (time = money, or just pay more attention to family;)

                                Components have been published above, I just need some recommendation on the network card.
                                Good ones are around 150 pounds, but I really don't know which one to pick up.

                                Better for this search on pfSense original doc, FreeBSD user forum, and on this user forum.

                                Pick up Intel, in Your usecase:

                                • 1Gb per port;
                                • 2-port NIC card for uplinks, and 2/4-port NIC card for LANs;

                                And care about UPS: online interactive models from Liebert, Eaton, Schneider are best choice.

                                —
                                CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                                Help Ukraine to resist, save civilians people’s lives !
                                (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                                1 Reply Last reply Reply Quote 0
                                • S Offline
                                  slimypizza
                                  last edited by

                                  For $250 at Amazon you can get a Qotom Q330G4 with 8G Ram, a 16G SSD, I3 AES-NI Crypto capable, 4 NICs, and HDMI video out. I have had this for over a year and it works great.

                                  J 1 Reply Last reply Reply Quote 1
                                  • Sergei_ShablovskyS Offline
                                    Sergei_Shablovsky @JT40
                                    last edited by Sergei_Shablovsky

                                    @jt40 said in Questions about my ideal setup:

                                    I found this one: Intel X710-da2 , it seems enough for me, I would love to have more ports but it's very difficult to find network cards that have more than 2 ports for my wallet :D .

                                    Fujitsu and IBM have Intel i350 based (Fujitsu D2745 Quad Port), they both are cheap on eBay.

                                    Please take a time to read Original Intel EXPI9404PTG2L20 EXPI9404PT PRO/1000 PT vs Fujitsu PRO/1000 PT Quad Port Gigabit Network Card PCI-E D2745-A11 low profile.

                                    Based on the recommendations written here: https://www.servethehome.com/buyers-guides/top-hardware-components-pfsense-appliances/top-picks-pfsense-network-cards-nics/

                                    —
                                    CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                                    Help Ukraine to resist, save civilians people’s lives !
                                    (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                                    J 1 Reply Last reply Reply Quote 1
                                    • J Offline
                                      JT40 @slimypizza
                                      last edited by

                                      @slimypizza if I find any benchmark that can prove it...

                                      1 Reply Last reply Reply Quote 0
                                      • J Offline
                                        JT40 @Sergei_Shablovsky
                                        last edited by

                                        @sergei_shablovsky said in Questions about my ideal setup:

                                        @jt40 said in Questions about my ideal setup:

                                        I found this one: Intel X710-da2 , it seems enough for me, I would love to have more ports but it's very difficult to find network cards that have more than 2 ports for my wallet :D .

                                        Fujitsu have Intel i350 based

                                        Based on the recommendations written here: https://www.servethehome.com/buyers-guides/top-hardware-components-pfsense-appliances/top-picks-pfsense-network-cards-nics/

                                        Why did you mention Fujitsu?
                                        But yes, that network card is enough, it's 1Gbit on both ports if I'm not wrong.

                                        Sergei_ShablovskyS 1 Reply Last reply Reply Quote 0
                                        • Sergei_ShablovskyS Offline
                                          Sergei_Shablovsky @JT40
                                          last edited by Sergei_Shablovsky

                                          @jt40 said in Questions about my ideal setup:

                                          @sergei_shablovsky said in Questions about my ideal setup:

                                          @jt40 said in Questions about my ideal setup:

                                          I found this one: Intel X710-da2 , it seems enough for me, I would love to have more ports but it's very difficult to find network cards that have more than 2 ports for my wallet :D .

                                          Fujitsu have Intel i350 based

                                          Why did you mention Fujitsu?

                                          Stable work, robust, what’s else? ;) (read link above)

                                          But yes, that network card is enough, it's 1Gbit on both ports if I'm not wrong.

                                          I told You more: 4 x 1Gb port Fujitsu D2745 Quad Port cost $27-50 on eBay ;) Enjoy!

                                          —
                                          CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                                          Help Ukraine to resist, save civilians people’s lives !
                                          (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                                          J 1 Reply Last reply Reply Quote 0
                                          • J Offline
                                            JT40 @Sergei_Shablovsky
                                            last edited by

                                            @sergei_shablovsky I swear I didn't see that :D
                                            Thanks a lot, but now I'm in front of another problem.
                                            It's almost impossible to find a mini ITX PSU on the UK soil... Or at least something good quality.
                                            Also outside it's quite rare...

                                            I think that I need to compromise from outside anyway, but at this point, why not this one alredy bundled, it's so cool all together already :D : https://www.aliexpress.com/item/1005003420929961.html?algo_pvid=6931b44c-ab16-4947-a5ba-0e605bdf7abd&algo_exp_id=6931b44c-ab16-4947-a5ba-0e605bdf7abd-43&pdp_ext_f=%7B%22sku_id%22%3A%2212000025713946221%22%7D
                                            I checked the network card, it seems good, not the best though.
                                            The model with I7 6500U and 16GB of RAM will cost me 300 without import tax, tax should not be much.

                                            Reason why I like it it's because it's fanless, very important to avoid bad smell and noise in the house, plus it's X86 which could serve some other purpose.

                                            Sergei_ShablovskyS 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.