Going from VM back to appliance

_ToXIc_

Hey guys i want to go back to having an appliance i've been tinkering alot and because pfsence is a VM internet goes down also.

so i've been looking at some minipcs. i may eventually run suricata so looking at a 4 core so i wont loose bandwidth..

found this appliance with a quad core and intel nics what do you think? or can you recommend something better for the price?

https://www.amazon.com/Q190G4N-S07-Industrial-Gateway-Firewall-pfSense/dp/B01CSCGD58

thuety

Just have a look at all the Qotom threads... seems to be popular.

stephenw10

The J1900 doesn't have AES-NI so it won't run pfSense 2.5.

Steve

Waqar.UK

Buy this

I use a i5 and it barely goes above 1%

https://www.aliexpress.com/item/Qotom-Mini-PC-Core-i3-i5-i7-with-4-Gigabit-Ethernet-NIC-Pfsense-AES-NI-Fiewwall/32863060778.html?spm=2114.search0104.3.9.3fff5759n63vWI&ws_ab_test=searchweb0_0,searchweb201602_1_10152_10151_10065_10344_10068_10130_10324_10342_10547_10325_10343_10546_10340_5722611_10548_10341_10696_5722911_10190_5722811_10084_5722711_10083_10618_10307_10303_10059_100031_10103_10624_10623_10622_10621_10620_5722511,searchweb201603_55,ppcSwitch_5&algo_expid=84b031fe-0247-4506-b2ba-a5b8f30c2cf9-1&algo_pvid=84b031fe-0247-4506-b2ba-a5b8f30c2cf9&transAbTest=ae803_2&priceBeautifyAB=0

Since Pfsense will need AES-NI from version 2.5 onwards.

_ToXIc_

thanks @stephenw10 for the heads up
@Waqar-UK i actually looked at that model and was worried that the IPS would create a bottle necked with the dual core and throttle my bandwidth

for it on amazon with a cheaper barebone price. too bad it will probably take the same amount of time to get here

https://www.amazon.com/gp/offer-listing/B06XJV9R8X/ref=dp_olp_new_mbc?ie=UTF8&condition=new

Waqar.UK

I bought the i5 last year, it has yet to slow down my Internet and I have tested it on gigabit connection and got 940 to 960 Mbit download speed.

_ToXIc_

@waqar-uk do you have an IPS running?

Waqar.UK

@_toxic_ said in Going from VM back to appliance:

@waqar-uk do you have an IPS running?

I use vanilla Pfsense, it works fine for me on a Chinese min 4 port PC.
The same one I pointed out.

_ToXIc_

gotcha.. sorry for all the questions..

its because i have a friend using an old pc for his FW and he's a security guy so he prioritizes that over bandwidth and it cuts his DL speed in half because of his hardware running the IPS

Waqar.UK

@_toxic_ said in Going from VM back to appliance:

gotcha.. sorry for all the questions..

its because i have a friend using an old pc for his FW and he's a security guy so he prioritizes that over bandwidth and it cuts his DL speed in half because of his hardware running the IPS

How old is the PC?

I have a very old core 2 duo machine, it easily passes 300 Mbit when it had Pfsense installed on it. My old Pfsense installation ( pre Qotom ), was a Dell OptiPlex 790 with a i5 CPU. It was a waste of resources, so I installed Windows and gave it to my parents. It flies with a SSD.