SG-1000 microFirewall Optical Illusion
-
Sorry to ask again, but will the SG-1000 support packages? Looking for very basic pfBlocker, FreeRADIUS. Snort/Suricata would be a dream but doubt it.
I may have to bump it up to the SG-2220 as a good, portable travel pfSense setup if the SG-1000 isn't beefy enough. (I'm looking to build a nice solution for when I travel and stay in hotels/conferences/family homes and am currently using a DD-WRT setup, which is wonderful for Wi-Fi/repeating/client/AP but lacks the full UTM setup I can get in pfSense.)
-
yes, it will support some packages. Exactly which ones we have not fully defined yet. Snort/suricata are highly unlikely.
-
Very nice.
I'll wait until they get offered without the Gold subscription and under $80.
(You can get a mini system with quad core N3150 with dual nics for $170).
You need to make money, I know, but the competition is fierce.
INTRODUCING THE
SG-1000
microFirewallhttps://netgate.com/products/sg-1000.html
Optical illusion.
-
You can get a mini system with quad core N3150 with dual nics for $170
With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?
-
AsRock is not a flyby company that I know?
You should know that most motherboards are made by the same handful of companies, so quality is not really an issue anymore.
I am willing to spend $60 more dollars for the memory and the ssd, in a system that will be 4x as powerful.
I am all about open/standard components so you can fix/replace them yourself.
@KOM:
You can get a mini system with quad core N3150 with dual nics for $170
With 2+ GB RAM, 32 GB SSD and not from some fly-by-night company?
-
Cool, I ordered one.
I was wondering when we'd see ASIC stuff in networking gear.
-
If I were to push a pair of these into service as an OpenVPN client and server, can anyone guess at the throughput, assuming a good connection.
What is the purpose of the sd-card?
-
What is the purpose of the sd-card?
That's probably the boot drive.
-
I think they should start an Evangelist program where they give free units to any forum member with more than +4000 posts and +468 karma…
I used to use a 6in4 tunnel, from gogo6 to get IPv6. They sent me one of their hardware adapters for free, because of all the help I was providing in the forum. They even wanted me to go to Los Angeles, to make a presentation at an IPv6 conference, but I passed on that.
I never used that adapter though as, at that time, my firewall was openSUSE Linux on which I ran their tunnel software. They apparently shut down the tunnel shortly after my ISP started offering IPv6 last spring.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
-
Hi just a question. Would this support an extra nic or wire-less on USB?
-
Hi just a question. Would this support an extra nic or wire-less on USB?
If there are FreeBSD/arm drivers for them, perhaps. We do not recommend using USB NICs, however. It will support using VLANs if you need to address more than two networks.
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
Hi jimp,
I would be interested to run pfSense on a Pi. I just setup a OpenVPN Server on a Pi and it was a real Pain.
I'd much prefer pfSense's implementation of OpenVPN.
Open VPN on a Pi is helpful for sitations where I need to remote into a site infrequently and cannot justify running a PC or appliance. Or in the event where I cannot replsce the existing router.I hope that pfSense will make the ARM version available so people can run it on a Pi or other low cost hatdware.
Best Regards
-
Maybe someone can direct me to a different thread, but this is ARM processor? Which generation ARM? Does this mean you can put pfSense on Pi?
I know there was no ARM processor support for pfSense in the past.
Yes it is ARM. No it does not mean you can (or would want to) run pfSense on a Pi.
It only means that this one specific ARM device will work.
Hi jimp,
I would be interested to run pfSense on a Pi. I just setup a OpenVPN Server on a Pi and it was a real Pain.
I'd much prefer pfSense's implementation of OpenVPN.
Open VPN on a Pi is helpful for sitations where I need to remote into a site infrequently and cannot justify running a PC or appliance. Or in the event where I cannot replsce the existing router.I hope that pfSense will make the ARM version available so people can run it on a Pi or other low cost hatdware.
Best Regards
Did you get any useful OpenVPN bandwidth from the Pi CPU?
-
"Did you get any useful OpenVPN bandwidth from the Pi CPU?"
Enough bandwidth for one user to run a VNC connection at 1080P (pi3, full Raspbian install)
Using the Pi as a DNS blackhole (pi-hole) i can get VPN throughput of around 4Mbit/sec when connecting with an iPhone.
Pi CPU remains below 20% when using AES256/SHA1. Thats just from looking at yhe CPU indicator of the Raspian GUI.
-
I would be interested to run pfSense on a Pi.
It's my understanding that the Pi, in addition to having only 100Mbps ethernet, has that ethernet port on a USB bus. Someone correct me if I'm wrong. I can see a lot of use cases for the Pi, but until it gets a proper Ethernet chipset, I won't even use it to replace my Sheevaplug (NAS with 2nd gen Drobo and BIND DNS server), much less as a pfSense box.
-
Hi Whosmatt,
Yes you are correct in regards to the ethernet port. Onboard ethernet would be preferred…
With any luck there'll be a BSD driver for that USB/ethernet interface.I wouldn't use a pi in a production environment... but making pfSense available on ARM would certainly be a positive move as it would lower the cost of getting into pfSense and the power consumption.
The SG-1000 probably caters for that need already... but 150$US might be out of many people's budget...
-
Any idea when this will be released? I ordered mine about 2-3 weeks ago and eager waiting for it ;D
-
… ordered ... 2-3 weeks ago ...
First come, first serve.
They seem to be working on it heavily. https://twitter.com/pfsense/status/799762396436832256
