New hardware

[noplan]

@jknott

hi,
if u plan tu use pfBlocker and play a little with DNSBL (DNS-based Blackhole List)
then the more RAM u have the better.

have u thought about gettin a NETGATE SG1100 box depending on your use case ...
and by the way much cooler than the aliX import ;)

AES and Intel Nics are keepin u headache free ;)

[noplan]

@nogbadthebad said in New hardware:

TBH

?? damn i'm from europe i dont speak emojii ;)

[NogBadTheBad]

@noplan said in New hardware:

@nogbadthebad said in New hardware:

TBH

?? damn i'm from europe i dont speak emojii ;)

I'm in Europe too

TBH = To Be Honest

[JKnott]

@nogbadthebad said in New hardware:

Hes talking about pfBlocker

I don't use pfblocker.

[JKnott]

@noplan said in New hardware:

have u thought about gettin a NETGATE SG1100 box

When that was discussed earlier, the opinion was that it was a bit anemic and to go for a better model.

[noplan]

@jknott

have a look SG-2100 here a little over 300 EUR not including VAT

@ SG1100 same here !

but compare it wirh the SG2100 maybe it fits

[noplan]

@nogbadthebad said in New hardware:

I'm in Europe too

No you are not ! You kicked yourself out !

:

[JKnott]

@noplan said in New hardware:

but compare it wirh the SG2100 maybe it fits

It's about twice the price of the Qotom I selected.

[noplan]

@jknott

but the shippin from them to me flippy expensive

[bingo600]

@noplan

Isn't shipping around $40 w. DHL ?

[noplan]

@bingo600

i think i'll get a new toy ;) but i think customs declaration & import tax will kill the benefit

but @ netgate i found this

[JKnott]

@jknott said in New hardware:

@noplan said in New hardware:

but compare it wirh the SG2100 maybe it fits

It's about twice the price of the Qotom I selected.

Hmmm... Somehow I got the idea it was twice the price, but on checking further it appears to be roughly the same. Which would have better performance? The Qotom is an i5 CPU and has Intel NICs, but the Netgate has an ARM CPU and Marvel NICs. Both have 4 GB.

[noplan]

@jknott

depends on your use case, and on how long u wanna use the "box"
if u are a home/lab user and planning to use the box till it dies go with the netgate box considering the future possibility to go all in with the pfS+ version they are talkin about

and hey its a netgate box vs a china box ;)

dont get me wrong i really dont have a clue what hardware i m gonna buy in the next 6 months

[A Former User]

@noplan said in New hardware:

and hey its a netgate box vs a china box

Exactly where do you think the Netgate device is manufactured?

[JKnott]

@jwj

As was the Unifi AP I recently bought. Does the Netgate have those AES-NI instructions?

[bingo600]

@jknott said in New hardware:

@jwj

Does the Netgate have those AES-NI instructions?

AES-NI is an Intel extension

[A Former User]

@jknott No. It doesn't. The i5 will crush the ARM device for single thread performance and OpenVPN throughput. Question is, do you need that performance? Netgate box will be more energy efficient.

For what it's worth, I've always seen the 5100 as entry level. Then I cried inside at the price... The LAN<->LAN filtering rates is what I pay attention to. I would want line speed.

[JKnott]

@bingo600 said in New hardware:

AES-NI is an Intel extension

It's on other CPUs too.

[bingo600]

@jknott said in New hardware:

@bingo600 said in New hardware:

AES-NI is an Intel extension

It's on other CPUs too.

Please mention just one ARM CPU that has it (AES-NI)

[JKnott]

@jwj said in New hardware:

No. It doesn't. The i5 will crush the ARM device for single thread performance and OpenVPN throughput. Question is, do you need that performance? Netgate box will be more energy efficient.

The Netgate takes a 12V 2A power supply, which means it runs less than 24W. The Qotom takes 15W, so there's not much difference. As for the AES-NI instructions, it wasn't that long ago that plans were dropped to require them. I don't have much of a need for those, as I only occasionally use the VPN, but I wouldn't want to lose the ability to update the software for the lack of them.