Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense box for 100/40 w/ traffic shaping + some room

    Scheduled Pinned Locked Moved Hardware
    19 Posts 6 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      The prices in Germany are complete bonkers. 665€ for the Atom based SG-2440. 420€ for the atom-based SG-3100.

      You sure those prices are not bundled with support?  They have started offering enterprise level support so yeah the price jumps up if you pick support vs community support which is 0$ ;)

      pricing.png
      pricing.png_thumb

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • B
        belt9
        last edited by

        $350 is pretty steep for an ARM CPU.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          There is a bit more too it than just the CPU ;)  Don't forget it comes with year of gold as well.

          Why don't you add up the price of building that box with the specs..  Then take into account the development cost of pfsense that buying hardware direct from them supports, etc. etc.  Now compare that price to say what you get with buying say comparable product vs some box made in china that your going to put pfsense on ;)

          I too would love them to be cheaper ;)  But not like they are all that crazy..  And I for sure understand budget committees (spouses) for your home purchases.. Which forced me to get the "cheap" usg until such time as budget can allow for pfsense hardware..  And I still got an eye roll when it showed - WTF did you order now ;)

          Maybe it is just me, but I would much rather wait a month or two to get pfsense hardware vs some china box.. Which isn't all that much cheaper when you add it all up..  What you going to save 100-150$  My buddy got one of those cheap boxes off amazon.. Ran into the bios issue, they sure an the hell not fixing it, etc.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • B
            belt9
            last edited by

            Haha yeah, the budget committee sure wouldn't stand for that (and I agree with her).

            It is a good value with gold.

            For me I use a SFF used i5-2400 workstation with 8gb ram. It's power hungry but was very cheap and it's powerful.

            I also like the $2-250 j3355b builds.

            Basically it would be nice to have an option to buy official without gold for those that don't want it.
            But that might not be realistic for netgate with their profit margins.

            1 Reply Last reply Reply Quote 0
            • M
              mathiasringhof
              last edited by

              You sure those prices are not bundled with support?  They have started offering enterprise level support so yeah the price jumps up if you pick support vs community support which is 0$ ;)

              Yep, I can add support from that local partner on top though. It's similar to say Apple, were a $699 device costs 799€.

              There is a bit more too it than just the CPU ;)  Don't forget it comes with year of gold as well.

              Yep and I would love to have that / support the company. I'm not complaining about the price they offer and as a company would love to get that premium support. But since it's just me playing around with my home network those appliances are not in price range, and that's OK!

              Maybe it is just me, but I would much rather wait a month or two to get pfsense hardware vs some china box.. Which isn't all that much cheaper when you add it all up..  What you going to save 100-150$  My buddy got one of those cheap boxes off amazon.. Ran into the bios issue, they sure an the hell not fixing it, etc.

              The main thing that scares me about the China boxes is the knock off thing. They all claim Intel chipsets & NICs, but how can you be sure? Especially the NICs are being copied like crazy apparently.

              Anyhow, thanks everyone for the support and responses, I really appreciate it. If there are more suggestions or links to threads with mini ITX builds, keep them coming I haven't written that route off!

              1 Reply Last reply Reply Quote 0
              • V
                VAMike
                last edited by

                @mathiasringhof:

                Insert note here about how annoying it is that intel is now calling everything a celeron. The 3855U and the J3355 are completely different architectures. The U series will be much faster for some tasks, but firewalling isn't one of them

                Yes, it has been very interesting to learn about the different chip series Intel puts out there. Atom C, D, E, Apollo Lake,  Skylake, jeez. What makes you say the SkylakeU are not faster at the pfSense stuff than the Apollo Lake Celerons? I'm tying my assessments to Passmark scores right now, but that might not be optimal.

                passmark is useless. To be clear, a skylake outperform an apollo lake at the same clock speed or at a slight clock speed disadvantage (which is the case between the 3855U and the J3355). What I meant is that for some tasks the skylake would stomp all over the apollo lake, but firewalling isn't one of those tasks–the performance will be a lot closer. So if the U series ends up being price competitive just get it.

                1 Reply Last reply Reply Quote 0
                • ?
                  Guest
                  last edited by

                  Haha yeah, the budget committee sure wouldn't stand for that (and I agree with her).

                  if all customers and/or users would be submitting 5 € - 10 € a year that would be not so hard to finance that
                  project. And as second, if you spend 20 years 5 € it is not to much but with Gold support you will get something back!

                  For me I use a SFF used i5-2400 workstation with 8gb ram. It's power hungry but was very cheap and it's powerful.
                  I also like the $2-250 j3355b builds.

                  I love more the APU2C4 bundles from the varia store here in Germany, they offers mostly good parts and are also
                  not so high in price.

                  Basically it would be nice to have an option to buy official without gold for those that don't want it.
                  But that might not be realistic for netgate with their profit margins.

                  I don´t know what you think what a pfSense version change will be producing in costs!? From 2.1.5 to 2.2x it
                  was something around ~$92.000,00 what I was reading once a time here in that forum from one of the developers.

                  The prices in Germany are complete bonkers. 665€ for the Atom based SG-2440.

                  You will get three miniPCIe slots + 1 SIM slot on top of this!

                  420€ for the atom-based SG-3100.

                  Please compare this unit to the SolidRun ClearFog pro unit with case and a qualified SoC or SoM!
                  It comes with more ports, crypto offloading engine inside of the CPU and it is ARM based as many many users
                  were asking for something like this in the past or formers days. My personally mind on this, is that many peoples
                  at first are calling and asking for somethings or more, and then if this will be available they all run away or have no
                  money to pay a small fee such 5 € for home usage and perhaps 10 € for professional usage inside of company networks.

                  1 Reply Last reply Reply Quote 0
                  • B
                    belt9
                    last edited by

                    the general idea is that most of the official solutions are priced well out of the budget of many home users and are also not competitive with what a home user could put together on their own or buy from a third party.

                    This is all totally understandable and fine - netgate is clearly not marketing home users as their primary buyer for most of their products.

                    1 Reply Last reply Reply Quote 0
                    • M
                      mathiasringhof
                      last edited by

                      Apologies for not stating clearly that I'm comparing US vs German prices, not complaining about the pricing for Netgate hardware in general. I do see the value they bring to the table, but I question the addition of 100+€ from that partner. But as I said, this is not so uncommon, not sure why though.

                      I'm also interested in the Gold subscription as I've heard very good things about the book. So I'd be paying roughtly $250. I'd definitely consider buying that, especially since then I can actually get confirmation from Netgate themselves before the purchase that it would (probably) fit my needs.

                      I love more the APU2C4 bundles from the varia store here in Germany, they offers mostly good parts and are also
                      not so high in price.

                      Hey thanks, I saw their offer on Amazon but good to hear they use good components. One line of thinking was to start with that and if for whatever reason I don't have enough power on this one, use it as a slave in a HA setup. Haven't looked into that too much, but it would enable me to use a VM with plenty of power and a backup unit in case the server gets rebooted / dies / explodes / flies away.

                      1 Reply Last reply Reply Quote 0
                      • B
                        belt9
                        last edited by

                        Gold is a great purchase if you're trying to learn pfSense, whether you purchase an official product or not.

                        1 Reply Last reply Reply Quote 0
                        • ?
                          Guest
                          last edited by

                          Hey thanks, I saw their offer on Amazon but good to hear they use good components.

                          For the lower Internet connection speeds here in Germany it will be one of the best and often sold hardware
                          in combination with pfSense as I am right informed. It is running here for 100 MBit/s down and 50 MBit/s up
                          for ~ 70 employees together with IPSec VPN, Squid & SquidGuard, snort and pfblockerNG, all is fine.

                          One line of thinking was to start with that and if for whatever reason I don't have enough power on this one, use it as a slave in a HA setup.

                          You will be able to run it in one big 1U" case as well available from the Varia-Store, here is a link to that dual 1U" case;
                          APU2C4 - 1 U" - rack mount case

                          Haven't looked into that too much, but it would enable me to use a VM with plenty of power and a backup unit in case the server gets rebooted / dies / explodes / flies away.

                          That could be also very interesting, but I love more the real hardware HA setup, if one server is "gone" mostly also
                          both VMs are also "gone" please don´t forget this too!

                          For more power you could also have a look on the new Supermicro Atom C3000 line
                          But the network drivers will be not really matching to all NICs that are SoC integrated!!!

                          Stronger and faster then the Intel Atom C2000 series, but slower and less powerful then the Intel Xeon D-15xx series.
                          it is not only interesting what kind of Internet connection speed you are running, also the amount of installed packets,
                          running applications, offered services or used protocols will be also important likes the amount of users and their
                          produced traffic such mailing, surfing, gaming or audio/video streaming!

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.