Arm fully supported?

lagreca

Are there are limitations of the new ARM based firewalls (ie. NOT x86)?

Are all pfsense features and package addons supported on the ARM devices?

All pfSense functions are there, but some packages might not have ARM versions.

jimp

All of the base features are there, but there are some packages that are disabled or will not currently compile for ARM:


Open-VM-Tools
blinkled
gwled
LCDproc
Telegraf

Granted you will not be able to do much with something like snort on an SG-1000 given the hardware limitations, but it is there for both it and the SG-3100.

Albert Hall

SG-3100 coming from Netgate is based on ARM but supports aes-cbc rather than aes-ni.
https://www.netgate.com/products/sg-3100.html

@Albert:

SG-3100 coming from Netgate is based on ARM but supports aes-cbc rather than aes-ni.
https://www.netgate.com/products/sg-3100.html

This is based on the ARM Cortex Chip and not x86, so there is no AES-NI inside!
But both ARM units from netgate.com are supporting hardware crypto offloading chip internal.
SG-1000
CPU: TI ARM Cortex-A8 AM3352 CPU at 600 MHz, including crypto accelerator

SG-3100
….featuring a dual core ARM design with crypto offload capability

starkiller

Does anyone know if this can be installed on non-netgate arm devices?

jimp

Every ARM platform is different, it is not a standard in the same sense as we are used to with x86 hardware. Each platform requires special handling for booting, drivers, etc.

That is why we currently only offer two ARM images and they are both for devices we sell (SG-1000, SG-3100) and the images are only available to users of those devices because they would fail to run on anything else.

I suppose if you can get FreeBSD to boot first, you'll have a chance at porting the pfSense stuff from github. But ARM is different from Intel-based PC's indeed. Where most x86 PC's adhere to the same standard (it's why they are called PC - it's not just a name but a set of standards so they all work the same, going back 30+ years) ARM does not. No two systems are compatible.

starkiller

@jimp:

Every ARM platform is different, it is not a standard in the same sense as we are used to with x86 hardware. Each platform requires special handling for booting, drivers, etc.

That is why we currently only offer two ARM images and they are both for devices we sell (SG-1000, SG-3100) and the images are only available to users of those devices because they would fail to run on anything else.

Thanks, was wondering about running on a UBNT Edge router, that answers my question.

@starkiller:

@jimp:

Every ARM platform is different, it is not a standard in the same sense as we are used to with x86 hardware. Each platform requires special handling for booting, drivers, etc.

That is why we currently only offer two ARM images and they are both for devices we sell (SG-1000, SG-3100) and the images are only available to users of those devices because they would fail to run on anything else.

Thanks, was wondering about running on a UBNT Edge router, that answers my question.

The UBNT Edge routers run on MIPS64 processors from Cavium (the Octeon series), not ARM.
MIPS64 support in FreeBSD is experimental at best. https://wiki.freebsd.org/FreeBSD/mips/Octeon
So even if ARM as was singular as x86 it wouldn't matter because it's MIPS and not ARM :P

Derelict

But I totally understand why you might want to run pfSense on it over what ubnt is currently shipping. :D

Thanks, was wondering about running on a UBNT Edge router, that answers my question.

It in the fact MIPS BE oder MIPS64 and not ARM!