Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    1RU (or 2RU) computer for PFSense

    Scheduled Pinned Locked Moved Hardware
    18 Posts 10 Posters 6.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      n0hc
      last edited by

      Thats why I was kind of thinking the 2U also since it would ultimately be cheaper in the end. Throughput…well that would be limited to the person connected to it since I am at a location with 1gig down/up. Ultimately it would be nice to throughput the VPN connection along with some IPTV streams at some point. So the faster the better really. It would be nice not to have to worry about changing it out for while.

      I was thinking about a firebox but just know they have issues every once in a while and will freeze up. I need this box to be very reliable and ultimately should have two running for backup.

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        "what about a firebox? 1U cheap on ebay and will handle VPN"

        You like tinkering?  looking for a new full time hobby?

        1 Reply Last reply Reply Quote 0
        • J
          jasonlitka
          last edited by

          @n0hc:

          Thats why I was kind of thinking the 2U also since it would ultimately be cheaper in the end. Throughput…well that would be limited to the person connected to it since I am at a location with 1gig down/up. Ultimately it would be nice to throughput the VPN connection along with some IPTV streams at some point. So the faster the better really. It would be nice not to have to worry about changing it out for while.

          I was thinking about a firebox but just know they have issues every once in a while and will freeze up. I need this box to be very reliable and ultimately should have two running for backup.

          An Atom will choke on that, even just with straight FW+NAT.

          You should head to eBay.  Try and find a system which supports AES-NI (aside from a few specialty chips, this means all recent Intel Xeon, i5, and i7 CPUs, as well as some AMD CPUs, not sure of the models on those).  I don't believe it's working 100% in pfSense 2.1 (based on a quick forum search), but once it does, it should help with the VPN offload.  Something like that will be a tough pull at $300 though, so you may have to make a decision on whether the budget or the throughput is more important.

          I can break anything.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            @charlie0440:

            what about a firebox? 1U cheap on ebay and will handle VPN

            Usually me suggesting that.  :)
            Only the xtm5 will get 1Gbps throughput and they don't appear on ebay very often or very cheaply. However if you did find one they are completely stable. Only the oldest (x-core) firebox has ongoing driver issues.

            Steve

            1 Reply Last reply Reply Quote 0
            • N
              n0hc
              last edited by

              This is for a work environment if I forgot to mention that and thats why its needs to be up and running pretty solid that being said it there will be two separate networks at the company. Obviously reliability always wanted. I have a x500 at my house and it seems to be running fairly well it has been only running for 2 weeks though. Either way I figured with dedicated If I did a 2ru, sounds like that would be the cheapest yet but is there anything in particular that I should be looking for in the motherboard (ex Intel NIC's opposed to Realtek, etc) and processor? Would an i3 suffice?

              1 Reply Last reply Reply Quote 0
              • B
                bennyc
                last edited by

                You didn't state for how much users it needed to be, but for basic functionality (even with VPN, multiple WAN or policy based routing requirements) the following should do: http://www.applianceshop.eu/index.php/opnsense-rack-edition-pfsense-appliance.html
                (hint: that's an Alix 2D13 in a rack  ;) Reliable hardware, well supported, close to your budget, however no Gb nics…)
                If you can get your hands on a firebox e550/750/1250 (or even a ssl core) they all run fine, and if you follow StephenW10's instructions you should be able to get that up&running in a couple of hours... If you buy bare parts, you need the time as well in assembling.
                Just my 2 cents. Good luck hunting.

                4x XG-7100 (2xHA), 1x SG-4860, 1x SG-2100
                1x PC Engines APU2C4, 1x PC Engines APU1C4

                1 Reply Last reply Reply Quote 0
                • N
                  n0hc
                  last edited by

                  So lets just make a 2RU firewall box. I have the budget upto $500. Could you buys give me hardware recommendations? (Case, Mobo, CPU, RAM, PSU, etc) Please let me know, thanks!

                  1 Reply Last reply Reply Quote 0
                  • N
                    n0hc
                    last edited by

                    How does this setup look and is there anything that I should change?

                    Intel S1200BTSR LGA 1155 Micro ATX Intel Motherboard - OEM
                    http://www.newegg.com/Product/Product.aspx?Item=N82E16813121714

                    Intel Core i3-3240 Ivy Bridge 3.4GHz LGA 1155 55W Dual-Core Desktop Processor Intel HD Graphics 2500 BX80637i33240
                    http://www.newegg.com/Product/Product.aspx?Item=N82E16819116773

                    Western Digital Scorpio Black WD2500BEKT 250GB 7200 RPM 16MB Cache SATA 3.0Gb/s 2.5" Internal Notebook Hard Drive
                    http://www.newegg.com/Product/Product.aspx?Item=N82E16822136279

                    SeaSonic SS-300ET Bronze 300W ATX12V V2.3 80 PLUS BRONZE Certified Active PFC Power Supply - OEM
                    http://www.newegg.com/Product/Product.aspx?Item=N82E16817151086

                    G.SKILL 4GB (2 x 2GB) 240-Pin DDR3 SDRAM DDR3 1333 (PC3 10666) Dual Channel Kit Desktop Memory Model F3-10666CL9D-4GBNQ
                    http://www.newegg.com/Product/Product.aspx?Item=N82E16820231190

                    iStarUSA D-213-MATX Black Metal/ Aluminum 2U Rackmount microATX Server Chassis 1 External 5.25" Drive Bays - OEM
                    http://www.newegg.com/Product/Product.aspx?Item=N82E16811165213

                    Total comes to $495

                    1 Reply Last reply Reply Quote 0
                    • A
                      Aluminum
                      last edited by

                      @n0hc:

                      How does this setup look and is there anything that I should change?

                      Intel S1200BTSR LGA 1155 Micro ATX Intel Motherboard - OEM
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16813121714

                      Intel Core i3-3240 Ivy Bridge 3.4GHz LGA 1155 55W Dual-Core Desktop Processor Intel HD Graphics 2500 BX80637i33240
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16819116773

                      Western Digital Scorpio Black WD2500BEKT 250GB 7200 RPM 16MB Cache SATA 3.0Gb/s 2.5" Internal Notebook Hard Drive
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16822136279

                      SeaSonic SS-300ET Bronze 300W ATX12V V2.3 80 PLUS BRONZE Certified Active PFC Power Supply - OEM
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16817151086

                      G.SKILL 4GB (2 x 2GB) 240-Pin DDR3 SDRAM DDR3 1333 (PC3 10666) Dual Channel Kit Desktop Memory Model F3-10666CL9D-4GBNQ
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16820231190

                      iStarUSA D-213-MATX Black Metal/ Aluminum 2U Rackmount microATX Server Chassis 1 External 5.25" Drive Bays - OEM
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16811165213

                      Total comes to $495

                      I see you are paying a lot more for a server board (C206) but using regular ram. That cpu also has no aes-ni which you can do cheaper with haswell i3s, not sure if that platform is too new for even 2.1 though.
                      If you do want ECC, there are better supermicro models.

                      To be honest the easiest way to get reliable intel server nics is $25 for a dual port on fleabay and they also come low profile, instead of paying extra for onboard versions. ($75~100 for LP quads)

                      Any chance you live near a microcenter? There are a couple nice cpu+board options, $90 S1155 and S1150 uATX boards with intel nics. (DH77EB w/ 82579V and H87M Pro4 w/ i217V respectively)

                      If haswell works on 2.1 this will get you aes-ni with the same clockspeed:
                      i3 4130 http://www.newegg.com/Product/Product.aspx?Item=N82E16819116946
                      http://www.newegg.com/Product/Product.aspx?Item=N82E16813157384

                      1 Reply Last reply Reply Quote 0
                      • S
                        Supermule Banned
                        last edited by

                        This will do what you want forever! http://www.ebay.com/itm/IBM-X3650-3-5-2U-Server-2x-2-5GHz-Quad-Core-16GB-4-x-73GB-15K-DVD-Rail-Kit-/331006101690?pt=COMP_EN_Servers&hash=item4d118048ba

                        1 Reply Last reply Reply Quote 0
                        • N
                          n0hc
                          last edited by

                          @Supermule:

                          This will do what you want forever! http://www.ebay.com/itm/IBM-X3650-3-5-2U-Server-2x-2-5GHz-Quad-Core-16GB-4-x-73GB-15K-DVD-Rail-Kit-/331006101690?pt=COMP_EN_Servers&hash=item4d118048ba

                          I totally agree with you on that but my company is wanting us to buy all new stuff. The other box that I was looking at is this:
                          http://www.ebay.com/itm/221280755944?ssPageName=STRK:MEWAX:IT&_trksid=p3984.m1423.l2649

                          But they seem adamant about only getting brand new.

                          1 Reply Last reply Reply Quote 0
                          • N
                            n0hc
                            last edited by

                            @Aluminum:

                            @n0hc:

                            How does this setup look and is there anything that I should change?

                            Intel S1200BTSR LGA 1155 Micro ATX Intel Motherboard - OEM
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16813121714

                            Intel Core i3-3240 Ivy Bridge 3.4GHz LGA 1155 55W Dual-Core Desktop Processor Intel HD Graphics 2500 BX80637i33240
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16819116773

                            Western Digital Scorpio Black WD2500BEKT 250GB 7200 RPM 16MB Cache SATA 3.0Gb/s 2.5" Internal Notebook Hard Drive
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16822136279

                            SeaSonic SS-300ET Bronze 300W ATX12V V2.3 80 PLUS BRONZE Certified Active PFC Power Supply - OEM
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16817151086

                            G.SKILL 4GB (2 x 2GB) 240-Pin DDR3 SDRAM DDR3 1333 (PC3 10666) Dual Channel Kit Desktop Memory Model F3-10666CL9D-4GBNQ
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16820231190

                            iStarUSA D-213-MATX Black Metal/ Aluminum 2U Rackmount microATX Server Chassis 1 External 5.25" Drive Bays - OEM
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16811165213

                            Total comes to $495

                            I see you are paying a lot more for a server board (C206) but using regular ram. That cpu also has no aes-ni which you can do cheaper with haswell i3s, not sure if that platform is too new for even 2.1 though.
                            If you do want ECC, there are better supermicro models.

                            To be honest the easiest way to get reliable intel server nics is $25 for a dual port on fleabay and they also come low profile, instead of paying extra for onboard versions. ($75~100 for LP quads)

                            Any chance you live near a microcenter? There are a couple nice cpu+board options, $90 S1155 and S1150 uATX boards with intel nics. (DH77EB w/ 82579V and H87M Pro4 w/ i217V respectively)

                            If haswell works on 2.1 this will get you aes-ni with the same clockspeed:
                            i3 4130 http://www.newegg.com/Product/Product.aspx?Item=N82E16819116946
                            http://www.newegg.com/Product/Product.aspx?Item=N82E16813157384

                            Is there a chance that I could get a good NIC on newegg? I live in a pretty remote area, so no microcenter around here. Dont mind spending the money for a intel server nic if that would be much more reliable. Do you have a suggestion on RAM, or just any good server RAM will do?

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.