Hardware requirement for Intel home router
-
@stephenw10 said in Hardware requirement for Intel home router:
The internal links in the XG-7100 are 2.5Gbase-KX not PCIe.
I don't understand it. As I could verify at http://www.smart-dv.com/vip/eth_2_5g_5g.html, 2.5Gbase-KX seems to be related with Ethernet and IP verification, it doesn't seem to be a bus between chips.
-
@stephenw10 said in Hardware requirement for Intel home router:
pfSense does not include any build tools, that's the same in Factory or CE.
It's possible to install packages from the FreeBSD repos but not recommended as they can pull in things and overwrite something that is custom in pfSense:
https://docs.netgate.com/pfsense/en/latest/recipes/freebsd-pkg-repo.htmlInteresting points on that article. It's sad that pfSense doesn't have build tools, but totally understandable.
I'm pretty sure that all features available on OpenWRT are also on pfSense. I just don't know what's on pfSense to replace Yamon, it's a third party tool that logs traffic from all LAN devices and reports how much download and upload per day and higher periods each device has been consuming.
I also guess that pfSense has better support for Multi WAN than OpenWRT and for monitoring and load balancing if any link goes down. As I said, I'm unable to monitor IPv6 on one of my ISPs because I can't manage to make BusyBox's ping work on the virtual interface that OpenWRT creates for IPv6 over PPPoE. Because of that, all IPv6 traffic is using only 1 of them.
Apart from that, I guess pfSense has JVM (not jdk) and Python support. If any script or jar I deploy breaks something, I'm to blame :) That's also why I was guessing if 16GB RAM and Pentium is enough.
Also, I have my Ubuntu server where I have some services running and I do keep the router as clean as possible. Only things I run on it are monitors that rely on choosing which network interface to use, and I struggled to continue developing because I'm not good on Bash and know nothing about Python :-x
-
I'm not familiar with OpenWRT or Yamon, but if you're looking for traffic monitoring we've used bandwidthd. It's listed at https://docs.netgate.com/pfsense/en/latest/monitoring/graphs/bandwidth-usage.html but not https://docs.netgate.com/pfsense/en/latest/packages/list.html. There are others as well.
Bandwidthd has a formatting (iframe size) problem with pfSense 2.4.5 but other than that it seems fine for our needs. Click the "click to remove frame" link to get around that for now.
-
The C3558 CPU in the XG-7100 is a complete SoC that includes the 4 ixgbe NICs. They are not bus connected in the traditional sense.
The quoted 2.5Gbps internal link is not a PCIe bandwidth. It's the Ethernet connection between the NICs and the on-board switch chip. Base-KX there because the chips are linked directly rather then using fibre or cat6 etc. Better explanation here:
https://etherealmind.com/backplane-ethernet-gbase-kr-kx/Steve
-
@teamits tnx! I just created a thread asking for that lol
@stephenw10 said in Hardware requirement for Intel home router:
The C3558 CPU in the XG-7100 is a complete SoC that includes the 4 ixgbe NICs. They are not bus connected in the traditional sense.
The quoted 2.5Gbps internal link is not a PCIe bandwidth. It's the Ethernet connection between the NICs and the on-board switch chip. Base-KX there because the chips are linked directly rather then using fibre or cat6 etc. Better explanation here:
https://etherealmind.com/backplane-ethernet-gbase-kr-kx/tnx a lot for all the help!
Indeed I was wrong. I verified Intel spec for Atom C3558 and I210-AT, and indeed 4 ports are provided directly by the CPU. I believe I210-AT uses 3GIO 2.1, as that's its supported bus and C3558 supports 3.0 and seems to be a Comet Lake.
-
@Hikari All I can say is that XG-7100 makes me drool ... if you can afford it don't hesitate.
-
@NollipfSense said in Hardware requirement for Intel home router:
@Hikari All I can say is that XG-7100 makes me drool ... if you can afford it don't hesitate.
lol why is it that much?
Isn't it as a mini-PC with a weak CPU and some very good RAM amount and reasonable storage? What's the advantage of an appliance for a built PC for a user that knows how to install pfSense?
-
Does SG-5100 have only 8GB for storage? How much comes free for installing extra pfSense packages?
-
The packages themselves don't require much drive space. It's the logging and anything that caches that does.
This is a test SG-5100 I have here running from eMMC with Suricata installed:Disk usage: / 23% of 6.7GiB - ufsSteve
-
Tnx a lot! Is it possible to use flash card on it? I missed that out.
Is there an specific model or limit?
-
https://www.netgate.com/solutions/pfsense/sg-5100.html shows
"8GB eMMC Flash on board
Upgradable"I think you are looking for https://docs.netgate.com/pfsense/en/latest/solutions/sg-5100/m-2-sata-installation.html.
The only time I've ever seen a pfSense router get into space issues was one where Suricata had a bug for a while where the log files were not correctly being deleted in the default configuration, and slowly grew to 6 GB or so. Otherwise for most normal use I would expect to see in the 1-3 GB usage and if it was over 2 I'd be a bit surprised unless there was really heavy package use or squid caching or something going on.
-
Yup you can install an m.2 SATA drive (not NVMe) and run from that as shown there.
You might do that if you wanted to run Squid with a large local cache or use a lot of local logging for example.
Steve
-
tnx!!
So it's not rly necessary. Anything not router related I run on my Ubuntu server.
So, SG-5100 does have enough storage, and SG-7100's extra SSD should be for running services that can/should be ran outside router. The same should be for extra RAM.
They both have same CPU, so I guess Atom is enough too.
So, basically SG-7100 is aimed at running average services not related to routing, and for LANs with many hundreds PCs?
-
Number of clients is not really a good measure for pfSense. You're very unlikely to hit the limits if the state table.
Total throughput and how much of that might need to be over VPN are what you should be considering.Steve
