SG-1000 microFirewall Optical Illusion
-
Asterisk already runs great on Raspi3 :)
But now you will be also able to install a pfSense on that small SG-1000 and set it up as a small Captive Portal
into existing networks, also a separate Radius Server is able to set up fast and/or a log server that is secured
"like" a firewall will be nice to see in many companies to save their log files, also able to think about is you may
need sometimes a smaller or or little device for doing sniffing or with some network tools measuring from an
other point in the network likes you PC or laptop so that small SG-1000 is really interesting for many peoples
as I see it right.The Edge router line is very interesting and may meet the needs of some folks but the gui is sadly lacking and trying to use the command line is very frustrating when you only do it a couple times a year.
they have some nice small to bigger router devices that would be fine rocking together with pfSense in
my eyes as a firewall only option and for sure it will be also looking likes a real router or firewall.Since Chris switched over to Ubiquiti, i hope he can get involved in the GUI development, to see a better one in the Edge-Line.
Wich Chris was switching over to what? Is Chris Buechler now working at UBNT now? Or do you mean
he is switching over to that smaller UBNT routers? Would you please so friendly and tell me something about. -
@BlueKobold:
…
Since Chris switched over to Ubiquiti, i hope he can get involved in the GUI development, to see a better one in the Edge-Line.
Wich Chris was switching over to what? Is Chris Buechler now working at UBNT now? Or do you mean
he is switching over to that smaller UBNT routers? Would you please so friendly and tell me something about.in case you missed this: https://forum.pfsense.org/index.php?topic=114659.0;all
-
This may be an excellent box to run Asterisk on.
I suppose if you like to edit the config files by hand. I say this because you wont have enough ram to use freepbx without it paging constantly.Actually I'm thinking of the pogoplugs 128MB of ram that's insuffucient so I guess 512 would be enough but it still seems a bit expensive for this purpose. A rpi3 is superior and cheaper. The only advantage this thing has is disk on module which I'm unsure if it's more reliable then flash memory or not.
The second nic don't really serve any purpose for asterisk. -
I just ran across the info on this little device. I am going to assume that it will run the latest, greatest version of pfSense? I have been trying to deal with the limited amount of power that I get from a 30A connection (I live in my travel trailer when I am working contracts). I was thinking about the J19000 because the price was do-able and the power very do-able.
In the end, this device might might fit the bill, because I can connect the WAN to my cable modem and the LAN could be connected to my Nighthawk AC1900 since I can create VLAN and connect small switches for very network needs. So I guess this is going to be on the list when the device is available. I guess I would have like to have seen 1 or 2 Gb (because memory is cheap), same with the eMMC. I can pay $27 for a 32Gb, but I am sure that I will do just fine with 512M/4GB.
-
Sorry to ask again, but will the SG-1000 support packages? Looking for very basic pfBlocker, FreeRADIUS. Snort/Suricata would be a dream but doubt it.
I may have to bump it up to the SG-2220 as a good, portable travel pfSense setup if the SG-1000 isn't beefy enough. (I'm looking to build a nice solution for when I travel and stay in hotels/conferences/family homes and am currently using a DD-WRT setup, which is wonderful for Wi-Fi/repeating/client/AP but lacks the full UTM setup I can get in pfSense.)
-
yes, it will support some packages. Exactly which ones we have not fully defined yet. Snort/suricata are highly unlikely.
-
Very nice.
I'll wait until they get offered without the Gold subscription and under $80.
(You can get a mini system with quad core N3150 with dual nics for $170).
You need to make money, I know, but the competition is fierce.
INTRODUCING THE
SG-1000
microFirewallhttps://netgate.com/products/sg-1000.html
Optical illusion.
-
You can get a mini system with quad core N3150 with dual nics for $170
With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?
-
AsRock is not a flyby company that I know?
You should know that most motherboards are made by the same handful of companies, so quality is not really an issue anymore.
I am willing to spend $60 more dollars for the memory and the ssd, in a system that will be 4x as powerful.
I am all about open/standard components so you can fix/replace them yourself.
@KOM:
You can get a mini system with quad core N3150 with dual nics for $170
With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?
-
Cool, I ordered one.
I was wondering when we'd see ASIC stuff in networking gear.
-
If I were to push a pair of these into service as an OpenVPN client and server, can anyone guess at the throughput, assuming a good connection.
What is the purpose of the sd-card?
-
What is the purpose of the sd-card?
That's probably the boot drive.
-
I think they should start an Evangelist program where they give free units to any forum member with more than +4000 posts and +468 karma…
I used to use a 6in4 tunnel, from gogo6 to get IPv6. They sent me one of their hardware adapters for free, because of all the help I was providing in the forum. They even wanted me to go to Los Angeles, to make a presentation at an IPv6 conference, but I passed on that.
I never used that adapter though as, at that time, my firewall was openSUSE Linux on which I ran their tunnel software. They apparently shut down the tunnel shortly after my ISP started offering IPv6 last spring.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
-
Hi just a question. Would this support an extra nic or wire-less on USB?
-
Hi just a question. Would this support an extra nic or wire-less on USB?
If there are FreeBSD/arm drivers for them, perhaps. We do not recommend using USB NICs, however. It will support using VLANs if you need to address more than two networks.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
Hi jimp,
I would be interested to run pfSense on a Pi. I just setup a OpenVPN Server on a Pi and it was a real Pain.
I'd much prefer pfSense's implementation of OpenVPN.
Open VPN on a Pi is helpful for sitations where I need to remote into a site infrequently and cannot justify running a PC or appliance. Or in the event where I cannot replsce the existing router.I hope that pfSense will make the ARM version available so people can run it on a Pi or other low cost hatdware.
Best Regards
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
Hi jimp,
I would be interested to run pfSense on a Pi. I just setup a OpenVPN Server on a Pi and it was a real Pain.
I'd much prefer pfSense's implementation of OpenVPN.
Open VPN on a Pi is helpful for sitations where I need to remote into a site infrequently and cannot justify running a PC or appliance. Or in the event where I cannot replsce the existing router.I hope that pfSense will make the ARM version available so people can run it on a Pi or other low cost hatdware.
Best Regards
Did you get any useful OpenVPN bandwidth from the Pi CPU?
-
"Did you get any useful OpenVPN bandwidth from the Pi CPU?"
Enough bandwidth for one user to run a VNC connection at 1080P (pi3, full Raspbian install)
Using the Pi as a DNS blackhole (pi-hole) i can get VPN throughput of around 4Mbit/sec when connecting with an iPhone.
Pi CPU remains below 20% when using AES256/SHA1. Thats just from looking at yhe CPU indicator of the Raspian GUI.
