3100 will reach "End of Life" in 5 days
-
@gweempose you can use any interface for wan. Just because port is "label" wan on the case doesn't mean you can't setup any other port as wan if you want.
I do believe there is some more too moving to 4100 from 3100.. The 3100 had switch ports, the 4100 has 6 discrete interfaces. So it would be a bit more than just import config - since the interfaces wouldn't be able to match up.
I do believe TAC would help you..
edit: hahah Jim beat me too it ;)
-
@johnpoz said in 3100 will reach "End of Life" in 5 days:
Until it actually dies, or they no longer provide updates too it, I have no plans on replacing it ;)
I've got a SG-2440 that is in the same boat. I do have it sitting as a spare right now, but it still runs strong.
-
-
@gweempose said in 3100 will reach "End of Life" in 5 days:
Forgive my ignorance, but what is TAC?
Netgate’s support. Go.netgate.com. To be clear if you’re moving to a Netgate appliance it’s a free support ticket for them to convert the config. Just have to say what interface goes where, VLANs, etc.
-
@jimp said in 3100 will reach "End of Life" in 5 days:
The labels on the ports are just labels reflecting the default assignments, you can reassign them any way you like. You can use any of the 2.5G "LAN" ports as WANs, you just need to change the interface assignments/config to match what you want.
Ah. That makes sense. I'm currently only using two ports on my 3100. My cable modem goes into the WAN port, and then one of the LAN ports goes to a 2.5 Gbps network switch. So I guess on the 4100 I would make one of the four 2.5 Gbps ports the WAN port, and make one of the other 2.5 Gbps ports the LAN port. I would then have a full 2.5 Gbps capable network. Is this correct?
-
@jimp said in 3100 will reach "End of Life" in 5 days:
The 23.09 release will include support for the 3100 yet since it's based on FreeBSD 14 which still has 32-bit ARM support, but it may be the last release. Hard to predict if we may need a 23.09.x point release for example which could still target the 3100.
We do usually put out patches for PHP/shell script type issues via the system patches package for some previous releases but we don't have a set schedule for those types of fixes.
FreeBSD is dropping 32-bit ARM support upstream in FreeBSD 15 so not a lot we can do there, the 3100 is Netgate's last 32-bit ARM system.
Thank you for the clarification. In recognition of this update, when is a realistic last responsible moment to target to retiring the 3100 with the understanding the security updates are critical for any device that remains in production? For personal deployments, the replacement is not inexpensive.
-
@gweempose said in 3100 will reach "End of Life" in 5 days:
I would then have a full 2.5 Gbps capable network. Is this correct
As far as the connections yes. The store shows for the 4100:
Firewall(10k ACLs)
IPERF3 Traffic: 4.09 Gbps
IMIX Traffic: 1.40 GbpsUsually I find speed tests are about halfway in between those numbers (speaking in general) so you should be OK but remember Suricata or other packages that interfere with or inspect packages will take CPU time and hence could slow things a bit once you get to the limit of your 2.5 Mbps Internet connection.
@netplumbers said in 3100 will reach "End of Life" in 5 days:
when is a realistic last responsible moment to target to retiring the 3100 with the understanding the security updates are critical
I'm not with Netgate but not every pfSense release has security fixes, so I don't know there is a direct answer to your question. Sometimes, they have backported PHP-code security patches via the System Patches packages, for instance I think they did that for 2.6 after 23.01 released but before 2.7 was out. You may just have to review release notes for future versions.
-
@jimp
Are there any drop in replacements for 3100 in the making?
E.g. 3164 with a 64 bit CPU? :) -
@netplumbers said in 3100 will reach "End of Life" in 5 days:
when is a realistic last responsible moment to target to retiring the 3100
Yes, it's hard to put a fixed date on that but I run a 3100 here and am looking at replacing it when the next release happens which should be 24.03. Before then if there's an issue that requires a point release we can rebuild against the current branch. As mentioned we usually back port patches for some time so really it would be acceptable to run a 3100 until a vulnerability is discovered after 24.03 is released that cannot be patched at runtime IMO.
Steve
-
@jimp I have a 3100 I was going to put up on ebay, but with this news I am reluctant to put it up for sale a when I know it ill not receive updates. I can not in good conscience sell it. I would rather give it back to Netgate for recycling/lab use. Is this possible?
Dan
-
S SteveITS referenced this topic on
-
N netplumbers referenced this topic on
-
M MaxK 0 referenced this topic on
-
S SteveITS referenced this topic on
-
With the 4200 now available for pre-order, I'm assuming this would be the most logical unit to replace my EOL 3100?
-
@gweempose In terms of specs/capability the 2100 is a step down and the 4200 a step up. What’s your use case, bandwidth, packages, VPN, etc.?
-
@SteveITS I get over a gig down from my cable company, and I have a 2.5 Gbps network, so I definitely want something that can take full advantage of that. I don't currently use a VPN on my router, but that seems like something that could come in handy. I also don't currently run any packages, although there are a few I find intriguing.
-
@gweempose With that speed, definitely the 4200. The 2100 won't get to a gig.
-
Yup the 4200 is a big step up from the 3100 but you would need that for 2.5G internal routing.
-
@SteveITS said:
@gweempose With that speed, definitely the 4200. The 2100 won't get to a gig.
@stephenw10 said:
Yup the 4200 is a big step up from the 3100 but you would need that for 2.5G internal routing.
Thanks for the responses, guys! I ended up pre-ordering the 4200. It may be overkill for my current needs, but it should future-proof my network, at least for a while.
-
Hello,
Does it mean that the 3100 will be updated again with FreeBSD 15 ?
HEADS UP: FreeBSD is stopping all 32-bit Hardware support except ARMv7Thank you.
Y. -
It's supported by current 24.03-dev snapshots.
24.03-DEVELOPMENT (arm) built on Thu Feb 15 6:00:00 GMT 2024 FreeBSD 15.0-CURRENTThere may be some packages that no longer build.
-
While they have not fully dropped support yet, FreeBSD degraded ARMv7 from a Tier 1 to a Tier 2 architecture, meaning it's more of a "best effort" / "if it works, it works, if it doesn't, it doesn't" sort of situation.
It's only going to get more and more broken as time goes on until it's fully dropped.
-
S SteveITS referenced this topic on
-
Since this is the most helpful 3100 topic I found I'll add an April 2024 update to it:
From the 24.03 release notes
Netgate 3100 (32-Bit ARM) Limitations
Support for the EOL Netgate 3100 device architecture, armv7, is being phased out upstream in FreeBSD. While this release still contains base system functionality for the Netgate 3100, several packages are unavailable as they can no longer build for that architecture. The list of packages unavailable for the Netgate 3100 now also includes Suricata, Squid, and squidGuard.Users who wish to continue using those packages on a Netgate 3100 should not upgrade to this release.
