Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Best fanless hardware for Gigabit wire speed

    Hardware
    3
    5
    1753
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      ManuCH last edited by

      I am currently running pfSense on a PCEngines APU2 which is supposed to reach around 600 Mbit/s. This is more than enough as I currently have a 250/25 connection.

      Fiber will be installed soon in my area and I will have a 1000/1000 line then.

      Therefore I'm looking into replacing the APU2 with something more powerful that can keep up with Gigabit wire speed and reach at least 900 Mbit/s.

      I'm not running any special extra packages and just using firewall rules. OpenVPN performance is not relevant (it's more than enough as it is as I'm only using it from my iPhone over 4G).

      At first I thought that an SG-2440 might be enough, but then I read somewhere that people are unable to get more than 700 Mbit/s out of it. Will I need an SG-4860?

      Any other suggestions? My requirement is that it's small and fanless. Also it needs to be a proven device, as I'm not into too much trial-and-error at the moment.

      1 Reply Last reply Reply Quote 0
      • ?
        Guest last edited by

        I am currently running pfSense on a PCEngines APU2 which is supposed to reach around 600 Mbit/s. This is more than enough as I currently have a 250/25 connection.

        How many and what kind of packets you are installing and using? And how many users must be sorted by that firewall?

        Fiber will be installed soon in my area and I will have a 1000/1000 line then.

        PPPoE or Not PPPoE using?

        Therefore I'm looking into replacing the APU2 with something more powerful that can keep up with Gigabit wire speed and reach at least 900 Mbit/s.

        A user named gonzopancho owns a 1/1 GBit/s symmetric Internet line that comes never under 900 MBit/s with plain routing (SPI/NAT)
        and some firewall rules.

        I'm not running any special extra packages and just using firewall rules. OpenVPN performance is not relevant (it's more than enough as it is as I'm only using it from my iPhone over 4G).

        Please clarify for me why you are not using firewall rules at the WAN port? That is what a firewall normally does, or?

        At first I thought that an SG-2440 might be enough, but then I read somewhere that people are unable to get more than 700 Mbit/s out of it. Will I need an SG-4860?

        SG-4860 will do the job as I see it right.

        Any other suggestions?

        SG-4860 for the pfSense shop.

        My requirement Is that it's small and fanless. Also it needs to be a proven device, as I'm not into too much trial-and-error at the moment.

        As said the SG-4860 will do the job for you or if PPPoE is not really needed you may also happy with the Jetway NF9HG-2930
        self made box for something around ~$360 but without QAT, AES-NI and less CPU cores.

        1 Reply Last reply Reply Quote 0
        • P
          pfBasic Banned last edited by

          If you want to build your own then a J3355B is a $55 SoC + a PCIe NIC for $10-50 depending on which you get. That will do what you want easily.

          1 Reply Last reply Reply Quote 0
          • M
            ManuCH last edited by

            @BlueKobold:

            How many and what kind of packets you are installing and using? And how many users must be sorted by that firewall?

            I have only installed the openvpn-client-export package. The firewall will serve 2-4 users and 15 devices in total.

            PPPoE or Not PPPoE using?

            No PPPoE, just regular IP and NAT.

            A user named gonzopancho owns a 1/1 GBit/s symmetric Internet line that comes never under 900 MBit/s with plain routing (SPI/NAT)
            and some firewall rules.

            Is that with an APU2??

            Please clarify for me why you are not using firewall rules at the WAN port? That is what a firewall normally does, or?

            Sorry, I might not have expressed myself clearly. What I meant is that I am only using firewall rules (on both WAN and LAN), and no other special advanced filtering features.

            SG-4860 will do the job as I see it right.

            So do you think the SG-2440 is not enough?

            Thank you!

            1 Reply Last reply Reply Quote 0
            • ?
              Guest last edited by

              No PPPoE, just regular IP and NAT.

              Ok, then the Jetway NF9HG-2930 would be also interesting for you, fan less and silent without turning parts!

              • Jetway NF9HG-2930 ~$199
              • 2 x 4 GB RAM ~$50
              • M350 case ~$50
              • external PSU ~$15
              • mSATA 16 GB ~$20

              Is that with an APU2??

              No, it was a SG-4860 from the pfSense store! Would also be a nice unit, with QAT, AES-NI and it comes pre-tuned!

              So do you think the SG-2440 is not enough?

              No it don´t think so, only with much luck and without PPPoE it could be running well, but I would not trust on that!
              better then the SG-4860 would be nice!

              1 Reply Last reply Reply Quote 0
              • First post
                Last post

              Products

              • Platform Overview
              • TNSR
              • pfSense
              • Appliances

              Services

              • Training
              • Professional Services

              Support

              • Subscription Plans
              • Contact Support
              • Product Lifecycle
              • Documentation

              News

              • Media Coverage
              • Press
              • Events

              Resources

              • Blog
              • FAQ
              • Find a Partner
              • Resource Library
              • Security Information

              Company

              • About Us
              • Careers
              • Partners
              • Contact Us
              • Legal
              Our Mission

              We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

              Subscribe to our Newsletter

              Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

              © 2021 Rubicon Communications, LLC | Privacy Policy