Best fanless hardware for Gigabit wire speed
-
I am currently running pfSense on a PCEngines APU2 which is supposed to reach around 600 Mbit/s. This is more than enough as I currently have a 250/25 connection.
Fiber will be installed soon in my area and I will have a 1000/1000 line then.
Therefore I'm looking into replacing the APU2 with something more powerful that can keep up with Gigabit wire speed and reach at least 900 Mbit/s.
I'm not running any special extra packages and just using firewall rules. OpenVPN performance is not relevant (it's more than enough as it is as I'm only using it from my iPhone over 4G).
At first I thought that an SG-2440 might be enough, but then I read somewhere that people are unable to get more than 700 Mbit/s out of it. Will I need an SG-4860?
Any other suggestions? My requirement is that it's small and fanless. Also it needs to be a proven device, as I'm not into too much trial-and-error at the moment.
-
I am currently running pfSense on a PCEngines APU2 which is supposed to reach around 600 Mbit/s. This is more than enough as I currently have a 250/25 connection.
How many and what kind of packets you are installing and using? And how many users must be sorted by that firewall?
Fiber will be installed soon in my area and I will have a 1000/1000 line then.
PPPoE or Not PPPoE using?
Therefore I'm looking into replacing the APU2 with something more powerful that can keep up with Gigabit wire speed and reach at least 900 Mbit/s.
A user named gonzopancho owns a 1/1 GBit/s symmetric Internet line that comes never under 900 MBit/s with plain routing (SPI/NAT)
and some firewall rules.I'm not running any special extra packages and just using firewall rules. OpenVPN performance is not relevant (it's more than enough as it is as I'm only using it from my iPhone over 4G).
Please clarify for me why you are not using firewall rules at the WAN port? That is what a firewall normally does, or?
At first I thought that an SG-2440 might be enough, but then I read somewhere that people are unable to get more than 700 Mbit/s out of it. Will I need an SG-4860?
SG-4860 will do the job as I see it right.
Any other suggestions?
SG-4860 for the pfSense shop.
My requirement Is that it's small and fanless. Also it needs to be a proven device, as I'm not into too much trial-and-error at the moment.
As said the SG-4860 will do the job for you or if PPPoE is not really needed you may also happy with the Jetway NF9HG-2930
self made box for something around ~$360 but without QAT, AES-NI and less CPU cores. -
If you want to build your own then a J3355B is a $55 SoC + a PCIe NIC for $10-50 depending on which you get. That will do what you want easily.
-
@BlueKobold:
How many and what kind of packets you are installing and using? And how many users must be sorted by that firewall?
I have only installed the openvpn-client-export package. The firewall will serve 2-4 users and 15 devices in total.
PPPoE or Not PPPoE using?
No PPPoE, just regular IP and NAT.
A user named gonzopancho owns a 1/1 GBit/s symmetric Internet line that comes never under 900 MBit/s with plain routing (SPI/NAT)
and some firewall rules.Is that with an APU2??
Please clarify for me why you are not using firewall rules at the WAN port? That is what a firewall normally does, or?
Sorry, I might not have expressed myself clearly. What I meant is that I am only using firewall rules (on both WAN and LAN), and no other special advanced filtering features.
SG-4860 will do the job as I see it right.
So do you think the SG-2440 is not enough?
Thank you!
-
No PPPoE, just regular IP and NAT.
Ok, then the Jetway NF9HG-2930 would be also interesting for you, fan less and silent without turning parts!
- Jetway NF9HG-2930 ~$199
- 2 x 4 GB RAM ~$50
- M350 case ~$50
- external PSU ~$15
- mSATA 16 GB ~$20
Is that with an APU2??
No, it was a SG-4860 from the pfSense store! Would also be a nice unit, with QAT, AES-NI and it comes pre-tuned!
So do you think the SG-2440 is not enough?
No it don´t think so, only with much luck and without PPPoE it could be running well, but I would not trust on that!
better then the SG-4860 would be nice!