Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    What are people using as there pfsense firewall/router?

    Scheduled Pinned Locked Moved Firewalling
    50 Posts 21 Posters 8.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hintslara82 Banned @hintslara82
      last edited by

      This post is deleted!
      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        Yeah spammer.. Sorry folk - this guy turned out to just be another spammer..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @Raffi_
          last edited by

          @Raffi_

          Some APC models do not work with pfsense.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          1 Reply Last reply Reply Quote 1
          • K
            Kartoff
            last edited by

            I am using Cisco UCS C210 M2 with 2x x5650 CPUs and 24 GB RAM... In there are also 2x Broadcom 57810 dual port 10G adapters, with every port on different VLAN, no LAGG, Tagging etc... All VLAN stuff is dedicated to Cisco Nexus 6000 :)

            bingo600B johnpozJ 2 Replies Last reply Reply Quote 0
            • bingo600B
              bingo600 @Kartoff
              last edited by

              @kartoff said in What are people using as there pfsense firewall/router?:

              I am using Cisco UCS C210 M2 with 2x x5650 CPUs and 24 GB RAM... In there are also 2x Broadcom 57810 dual port 10G adapters, with every port on different VLAN, no LAGG, Tagging etc... All VLAN stuff is dedicated to Cisco Nexus 6000 :)

              Outchh ...
              Do you have free electricity ?

              /Bingo

              If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

              pfSense+ 23.05.1 (ZFS)

              QOTOM-Q355G4 Quad Lan.
              CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
              LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

              1 Reply Last reply Reply Quote 1
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @Kartoff
                last edited by johnpoz

                Your running pfsense on one of these?

                2579280.jpg

                That is nuts! ;)

                How much power does that thing use??

                Are you running pfsense as VM on that beast.. I couldn't see using that as a firewall/router.. Its a beast.. Old sure - but those things are beasts!!

                Thing must use like 150W idle..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                1 Reply Last reply Reply Quote 0
                • K
                  Kartoff
                  last edited by Kartoff

                  I used to have free electricity before, but now I don't :( Maybe because of that I still have no habit to pay attention to consumption...
                  As @johnpoz suggested UCS consumption is about 150w-200w according to CIMC where I can't login now because it require flash which is deprecated now...
                  But consumption of UCS is less than half of what Nexus switch consume :

                  N6K-C6001-64P# sh env pow in

                  Power Supply Input:

                  PS Voltage Current Power Status
                  (Volt) (Amp) (Watt)

                  1 224.50 1.04 233.27 ok
                  2 224.00 1.16 259.00 ok

                                 Total: 492.27
                  

                  N6K-C6001-64P#

                  As you see switch consume 500w of power 😊

                  Depends of point of view UCS C210 is a beast, but also not :) For now it do the trick, but I already considering buying something with LGA2011 and PCI-E Gen3 😵
                  pfSense run on bare metal, no VM...
                  I want to try TNSR because it can handle much more traffic and that's why I may need new hardware according to requirements...
                  BTW I will be happy if pfSense start using VPP DPDK etc... in the future because this will enhance performance of existing hardware significantly :)

                  :Edit:
                  I manage to get in CIMC :
                  UCSC210M2PC.PNG

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @Kartoff
                    last edited by

                    Haha - I am good ;) hehehe

                    good.png

                    Talk about calling it pretty damn close..

                    I am all for enterprise gear.. In the enterprise where cost of electric is a very minor concern.. The only concern we ever had with power was that we had enough.. And if we didn't we put in more..

                    Thing prob sounds like small plane taxi on the runway with the fans in that thing alone..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    1 Reply Last reply Reply Quote 0
                    • bingo600B
                      bingo600
                      last edited by bingo600

                      @work
                      I'll "inherit" 4 x Cisco 9300 in Q1 2021

                      And I just inherited a "free" HP-DLP360 G9
                      Now if i can convince the Boss to get 2 x 10G cards .....

                      10G would be a nice upgrade in the TestLab.

                      Any suggestion for 10G cards for the HP ??

                      I'm not experienced w. Enterprise servers (ILO etc)

                      /Bingo

                      If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

                      pfSense+ 23.05.1 (ZFS)

                      QOTOM-Q355G4 Quad Lan.
                      CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
                      LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

                      NogBadTheBadN 1 Reply Last reply Reply Quote 0
                      • 1
                        1OF1000Quadrillion
                        last edited by

                        I have a completely overpowered Alienware R4 desktop I am using for pfsense now, my old HP died a couple weeks ago-blown motherboard. The Alienware has a 4790 CPU and 16 GB of ram.
                        I have never seen the CPU go over 6% and never seen the RAM usage over 20%.

                        When this PC running pfsense dies I fully intend on getting the SG3100 or equivalent at minimum from negate. I may even go for something a bit beefier if I upgrade to GB internet by then - I prefer overpowered to "just what's needed" or (gasp) under-powered.

                        If you run old PC hardware and "free" PFSense I encourage you to pay for a snort subscription at minimum to support Netgate's efforts.

                        johnpozJ Raffi_R 2 Replies Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @1OF1000Quadrillion
                          last edited by

                          @1of1000quadrillion said in What are people using as there pfsense firewall/router?:

                          pay for a snort subscription at minimum to support Netgate's efforts.

                          Huh?? You mean a support subscription from netgate? The $30/year rule subscription doesn't support netgate or pfsense that I am aware of..

                          Where did you see that the rule subscription supports netgate?

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          1 1 Reply Last reply Reply Quote 0
                          • 1
                            1OF1000Quadrillion @johnpoz
                            last edited by

                            @johnpoz

                            Srry man, I didn't..I just assumed that since snort was added on to pfsense that the subscription fee or a portion of it went to netgate...is this not true?

                            johnpozJ bmeeksB 2 Replies Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @1OF1000Quadrillion
                              last edited by

                              No I don't see how it could.. If it did I would think they would announce that somewhere.

                              The best way to support netgate is either buy an appliance, or get a support contract.. Or both ;) But the tac support is a $400 a year.. So it not something your typical home user would get.

                              Kind of shame they got rid of the 100$ a year gold - which was a way to support..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                              1 Reply Last reply Reply Quote 0
                              • bmeeksB
                                bmeeks @1OF1000Quadrillion
                                last edited by

                                @1of1000quadrillion said in What are people using as there pfsense firewall/router?:

                                @johnpoz

                                Srry man, I didn't..I just assumed that since snort was added on to pfsense that the subscription fee or a portion of it went to netgate...is this not true?

                                No, none of the Snort rules subscription money goes to Netgate. The money you pay to the Snort team is for their rules only. To support Netgate, and by extension pfSense, you can buy their hardware appliances and/or subscribe to their hardware and software support offerings.

                                The actual Snort software is 100% free. And there are some free rules, but they all have limitations. Some of the free rule packages don't cover all the identified threats out there, while other free packages only provide you rules after they are 30 days or more old. That means you don't get protection from the most recently identified threats.

                                1 Reply Last reply Reply Quote 0
                                • Raffi_R
                                  Raffi_ @1OF1000Quadrillion
                                  last edited by

                                  @1of1000quadrillion same here, I will definitely buy and recommend Netgate hardware in the future. However, I am currently supporting netgate by trying to help the community on these forums the best I can. If I can help answer one question that is less work for them, and time is money :)

                                  1 Reply Last reply Reply Quote 1
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by johnpoz

                                    If you just have desire to send some money somewhere.. You could always donate direct to freebsd.

                                    Since pfsense is using freebsd.. Good stuff that happens to or for freebsd, will trickle down to pfsense..

                                    https://freebsdfoundation.org/donate/

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                    1 1 Reply Last reply Reply Quote 2
                                    • NogBadTheBadN
                                      NogBadTheBad @bingo600
                                      last edited by

                                      @bingo600 said in What are people using as there pfsense firewall/router?:

                                      @work
                                      I'll "inherit" 4 x Cisco 9300 in Q1 2021

                                      I've managed to get an unused Cisco 2960x 24 port POE switch FOC.

                                      Looking at flood the rooms with ethernet at some point.

                                      Andy

                                      1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                      bingo600B 1 Reply Last reply Reply Quote 0
                                      • 1
                                        1OF1000Quadrillion @johnpoz
                                        last edited by

                                        @johnpoz I was going to ask if there was a paypal donation link for PFSense or something like that for home users, or people who bring their own device for pfsense, like me. I would gladly and quite happily donate $100.00 per year to pfsense directly.

                                        If that's not in the cards and you say FreeBSD donation is good enough for Netgate - then until I need another hardware device I can send that $100 to FreeBSD instead?

                                        Why not bring back the $100.00 Gold "donation", make it voluntary, do not give anything more for it. The donation or $100 a year gold should be for us users to show our appreciation for both the software and the experience that is given freely when ever we have issues or questions. I download, install and use PFSense and have been doing that for the past what 5-6 years? I've learned shitloads from this community and not one person has ever made me feel like an idiot (on purpose that is...:-). NOT all open source communities are as friendly or responsive as this one. That's worth more than $100 a year, but it's what i can afford...sigh...

                                        1 Reply Last reply Reply Quote 1
                                        • B
                                          byreddy12456 Banned
                                          last edited by

                                          This post is deleted!
                                          1 Reply Last reply Reply Quote 0
                                          • bingo600B
                                            bingo600 @NogBadTheBad
                                            last edited by bingo600

                                            @nogbadthebad said in What are people using as there pfsense firewall/router?:

                                            I've managed to get an unused Cisco 2960x 24 port POE switch FOC.

                                            Looking at flood the rooms with ethernet at some point.

                                            Watch out for power usage , those guyzz often use a lot of "Idle power" due to the 370 W PoE capability , and the fans are not "silent".

                                            I went (at home) for a fanless D-Link DGS-1210-24 , and a fanless DGS-1210-10P (PoE).
                                            I have also used the fanless DGS-1100-08P (PoE) (cheap)

                                            /Bingo

                                            If you find my answer useful - Please give the post a šŸ‘ - "thumbs up"

                                            pfSense+ 23.05.1 (ZFS)

                                            QOTOM-Q355G4 Quad Lan.
                                            CPUĀ  : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
                                            LANĀ  : 4 x Intel 211, DiskĀ  : 240G SAMSUNG MZ7L3240HCHQ SSD

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.