50/50 + VPN now planning for 100/100 & more
-
@BlueKobold:
This might be pending on some more things then only the WAN speed or Internet connection speed!
Here is goes:
- Squid & Squid Guard & SARG?
Nice to have, not a must.
Access limitations are not needed thought…- pfBlockerNG / tinyDNS?
Yes!
- Clam AV Scanning?
Yes!
- Snort or Suricata IDS?
Nice to have.
- http-proxy for caching proposes or not?
Isn't it similar to Squid?
-
@mtk:
@BlueKobold:
- APU2C4 will do that job with ease for you
- Jetway NF9HG-2930 too!
- AxiomTek NA342(R), NA361(R) order over the sales team in the UK by phone or email
Should even be worried about AES or anything else for the VPN connections?
APU2C4 has AES-NI as well as PCLMULQDQ (so when openvpn supports AES-GCM it'll do well). For now, though, 100Mbps VPN is probably more than the APU2 can sustain. If you need to sustain 100Mbps VPN today you'll need more power. If you need 50Mbps today and more sometime later (post openvpn-2.4), the APU2C4 is probably ok.
The N2930 lacks AES-NI and will probably bottleneck VPN, so will the J1900.
-
@mtk:
@BlueKobold:
- APU2C4 will do that job with ease for you
- Jetway NF9HG-2930 too!
- AxiomTek NA342(R), NA361(R) order over the sales team in the UK by phone or email
Should even be worried about AES or anything else for the VPN connections?
APU2C4 has AES-NI as well as PCLMULQDQ (so when openvpn supports AES-GCM it'll do well). For now, though, 100Mbps VPN is probably more than the APU2 can sustain. If you need to sustain 100Mbps VPN today you'll need more power. If you need 50Mbps today and more sometime later (post openvpn-2.4), the APU2C4 is probably ok.
The N2930 lacks AES-NI and will probably bottleneck VPN, so will the J1900.
Thanks!
are there any cheaper alternatives as this is the first device of the house? -
@mtk:
are there any cheaper alternatives as this is the first device of the house?
the apu2 is less than $150 all in, I'm not aware of anything cheaper than that.
-
-
@mtk:
@mtk:
are there any cheaper alternatives as this is the first device of the house?
the apu2 is less than $150 all in, I'm not aware of anything cheaper than that.
yeah, but in EU it's closer to (if not more than) €200, not even including taxes/shipping or the mSata (!)…
Have you looked at various resellers? I've seen it less than that, including VAT. You kinda need to buy storage for anything, and there are small/cheap msata drives from many places.
-
@mtk:
@mtk:
are there any cheaper alternatives as this is the first device of the house?
the apu2 is less than $150 all in, I'm not aware of anything cheaper than that.
yeah, but in EU it's closer to (if not more than) €200, not even including taxes/shipping or the mSata (!)…
Have you looked at various resellers? I've seen it less than that, including VAT. You kinda need to buy storage for anything, and there are small/cheap msata drives from many places.
If you could point out one reseller, that would be great!
-
Assemble it yourself, look Varia-store GmbH
-
If you could point out one reseller, that would be great!
Please don´t think you might be happy without the storage and a null modem cable.
As a bundle you might be paying ~193 Euro and if you buy them all as single spare
parts you can get all things for ~169 Euro that would be better then, plus the 16 GB
mSATA for ~17 - 20 Euro (alternatively SD card or USB stick) and a null modem cable
for ~3 Euro (must have).So something around 200 Euro you should count for that all in all.
-
Sorry for hooking in at this point, but this is similar to what I'm looking for. Same speed (100/100), with about 2 openVPN connections for Roadwarriors and 2 Site2Site connections (one for VoIP and one for AD Credentials)
So the Alix 2D4 would be sufficent?
-
-
So the Alix 2D4 would be sufficent?
The GUI from pfSense will be more then unresponsible and also the horse power will be less then you will need it.
For your needs in my eyes it would be more then enough to go with;
- APU2C4 (bundle)
- Jetway NF9HG-2930 (PSU, M350, mSATA, RAM)
- alternatively a SG-2440 from the pfSense store
-
APU2 should be enough, please don't throw in Alix with APU, they are NOT the same device (@geocast).
If someone is looking for an even smaller device (dimension-wise) and can go for a bit more money, the Lanner NCA-1010(B) is another viable alternative. Some similarities with the APU2 but another SOC (Intel based). But both sport Intel NICs. Also the Lanner has a HDMI port if someone isn't keen on having console-only like on the APU2, so he/she can plug in a monitor/TV into it if needed (and a keyboard via USB of course). Might be a nice alternative if someone wants a slim tiny device. -
The Lanner devices look very interesting, JeGr - thanks. Do you know any good places for consumers to buy them in Germany and the UK?
-
Just to confirm before I order.
-
APU2C4 System Board
-
Enclosure
-
Powersupply
-
Memory: MSATA 16GB
-
Null modem cable (DB9 F)
Is this a good shopping list?
-
-
For a single system, that looks complete, yes :)
-
For a single system, that looks complete, yes :)
Thanks.
I'm curious, what would be a non-single system?
-
As you can get various custom cases for the APU(2/3), it isn't unusual to see two boards in one case or other combinations. Or even two sets of systems. So that's why - for a single system - that order looks complete :)
-
The Lanner devices look very interesting, JeGr - thanks. Do you know any good places for consumers to buy them in Germany and the UK?
yes, curious about that too…
-
As you can get various custom cases for the APU(2/3), it isn't unusual to see two boards in one case or other combinations. Or even two sets of systems. So that's why - for a single system - that order looks complete :)
oh, this is a single board APU case… :)
