SG-1000 microFirewall Optical Illusion
-
This may be an excellent box to run Asterisk on.
I suppose if you like to edit the config files by hand. I say this because you wont have enough ram to use freepbx without it paging constantly.Actually I'm thinking of the pogoplugs 128MB of ram that's insuffucient so I guess 512 would be enough but it still seems a bit expensive for this purpose. A rpi3 is superior and cheaper. The only advantage this thing has is disk on module which I'm unsure if it's more reliable then flash memory or not.
The second nic don't really serve any purpose for asterisk. -
I just ran across the info on this little device. I am going to assume that it will run the latest, greatest version of pfSense? I have been trying to deal with the limited amount of power that I get from a 30A connection (I live in my travel trailer when I am working contracts). I was thinking about the J19000 because the price was do-able and the power very do-able.
In the end, this device might might fit the bill, because I can connect the WAN to my cable modem and the LAN could be connected to my Nighthawk AC1900 since I can create VLAN and connect small switches for very network needs. So I guess this is going to be on the list when the device is available. I guess I would have like to have seen 1 or 2 Gb (because memory is cheap), same with the eMMC. I can pay $27 for a 32Gb, but I am sure that I will do just fine with 512M/4GB.
-
Sorry to ask again, but will the SG-1000 support packages? Looking for very basic pfBlocker, FreeRADIUS. Snort/Suricata would be a dream but doubt it.
I may have to bump it up to the SG-2220 as a good, portable travel pfSense setup if the SG-1000 isn't beefy enough. (I'm looking to build a nice solution for when I travel and stay in hotels/conferences/family homes and am currently using a DD-WRT setup, which is wonderful for Wi-Fi/repeating/client/AP but lacks the full UTM setup I can get in pfSense.)
-
yes, it will support some packages. Exactly which ones we have not fully defined yet. Snort/suricata are highly unlikely.
-
Very nice.
I'll wait until they get offered without the Gold subscription and under $80.
(You can get a mini system with quad core N3150 with dual nics for $170).
You need to make money, I know, but the competition is fierce.
INTRODUCING THE
SG-1000
microFirewallhttps://netgate.com/products/sg-1000.html
Optical illusion.
-
You can get a mini system with quad core N3150 with dual nics for $170
With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?
-
AsRock is not a flyby company that I know?
You should know that most motherboards are made by the same handful of companies, so quality is not really an issue anymore.
I am willing to spend $60 more dollars for the memory and the ssd, in a system that will be 4x as powerful.
I am all about open/standard components so you can fix/replace them yourself.
@KOM:
You can get a mini system with quad core N3150 with dual nics for $170
With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?
-
Cool, I ordered one.
I was wondering when we'd see ASIC stuff in networking gear.
-
If I were to push a pair of these into service as an OpenVPN client and server, can anyone guess at the throughput, assuming a good connection.
What is the purpose of the sd-card?
-
What is the purpose of the sd-card?
That's probably the boot drive.
-
I think they should start an Evangelist program where they give free units to any forum member with more than +4000 posts and +468 karma…
I used to use a 6in4 tunnel, from gogo6 to get IPv6. They sent me one of their hardware adapters for free, because of all the help I was providing in the forum. They even wanted me to go to Los Angeles, to make a presentation at an IPv6 conference, but I passed on that.
I never used that adapter though as, at that time, my firewall was openSUSE Linux on which I ran their tunnel software. They apparently shut down the tunnel shortly after my ISP started offering IPv6 last spring.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
-
Hi just a question. Would this support an extra nic or wire-less on USB?
-
Hi just a question. Would this support an extra nic or wire-less on USB?
If there are FreeBSD/arm drivers for them, perhaps. We do not recommend using USB NICs, however. It will support using VLANs if you need to address more than two networks.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
Hi jimp,
I would be interested to run pfSense on a Pi. I just setup a OpenVPN Server on a Pi and it was a real Pain.
I'd much prefer pfSense's implementation of OpenVPN.
Open VPN on a Pi is helpful for sitations where I need to remote into a site infrequently and cannot justify running a PC or appliance. Or in the event where I cannot replsce the existing router.I hope that pfSense will make the ARM version available so people can run it on a Pi or other low cost hatdware.
Best Regards
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
Hi jimp,
I would be interested to run pfSense on a Pi. I just setup a OpenVPN Server on a Pi and it was a real Pain.
I'd much prefer pfSense's implementation of OpenVPN.
Open VPN on a Pi is helpful for sitations where I need to remote into a site infrequently and cannot justify running a PC or appliance. Or in the event where I cannot replsce the existing router.I hope that pfSense will make the ARM version available so people can run it on a Pi or other low cost hatdware.
Best Regards
Did you get any useful OpenVPN bandwidth from the Pi CPU?
-
"Did you get any useful OpenVPN bandwidth from the Pi CPU?"
Enough bandwidth for one user to run a VNC connection at 1080P (pi3, full Raspbian install)
Using the Pi as a DNS blackhole (pi-hole) i can get VPN throughput of around 4Mbit/sec when connecting with an iPhone.
Pi CPU remains below 20% when using AES256/SHA1. Thats just from looking at yhe CPU indicator of the Raspian GUI.
-
I would be interested to run pfSense on a Pi.
It's my understanding that the Pi, in addition to having only 100Mbps ethernet, has that ethernet port on a USB bus. Someone correct me if I'm wrong. I can see a lot of use cases for the Pi, but until it gets a proper Ethernet chipset, I won't even use it to replace my Sheevaplug (NAS with 2nd gen Drobo and BIND DNS server), much less as a pfSense box.
-
Hi Whosmatt,
Yes you are correct in regards to the ethernet port. Onboard ethernet would be preferred…
With any luck there'll be a BSD driver for that USB/ethernet interface.I wouldn't use a pi in a production environment... but making pfSense available on ARM would certainly be a positive move as it would lower the cost of getting into pfSense and the power consumption.
The SG-1000 probably caters for that need already... but 150$US might be out of many people's budget...