Arm fully supported?



  • Are there are limitations of the new ARM based firewalls (ie. NOT x86)?

    Are all pfsense features and package addons supported on the ARM devices?



  • All pfSense functions are there, but some packages might not have ARM versions.


  • Rebel Alliance Developer Netgate

    All of the base features are there, but there are some packages that are disabled or will not currently compile for ARM:

    
    Open-VM-Tools
    blinkled
    gwled
    LCDproc
    Telegraf
    

    Granted you will not be able to do much with something like snort on an SG-1000 given the hardware limitations, but it is there for both it and the SG-3100.



  • SG-3100 coming from Netgate is based on ARM but supports aes-cbc rather than aes-ni.
    https://www.netgate.com/products/sg-3100.html



  • @Albert:

    SG-3100 coming from Netgate is based on ARM but supports aes-cbc rather than aes-ni.
    https://www.netgate.com/products/sg-3100.html

    This is based on the ARM Cortex Chip and not x86, so there is no AES-NI inside!
    But both ARM units from netgate.com are supporting hardware crypto offloading chip internal.
    SG-1000
    CPU: TI ARM Cortex-A8 AM3352 CPU at 600 MHz, including crypto accelerator

    SG-3100
    ….featuring a dual core ARM design with crypto offload capability



  • Does anyone know if this can be installed on non-netgate arm devices?


  • Rebel Alliance Developer Netgate

    Every ARM platform is different, it is not a standard in the same sense as we are used to with x86 hardware. Each platform requires special handling for booting, drivers, etc.

    That is why we currently only offer two ARM images and they are both for devices we sell (SG-1000, SG-3100) and the images are only available to users of those devices because they would fail to run on anything else.



  • I suppose if you can get FreeBSD to boot first, you'll have a chance at porting the pfSense stuff from github. But ARM is different from Intel-based PC's indeed. Where most x86 PC's adhere to the same standard (it's why they are called PC - it's not just a name but a set of standards so they all work the same, going back 30+ years) ARM does not. No two systems are compatible.



  • @jimp:

    Every ARM platform is different, it is not a standard in the same sense as we are used to with x86 hardware. Each platform requires special handling for booting, drivers, etc.

    That is why we currently only offer two ARM images and they are both for devices we sell (SG-1000, SG-3100) and the images are only available to users of those devices because they would fail to run on anything else.

    Thanks, was wondering about running on a UBNT Edge router, that answers my question.



  • @starkiller:

    @jimp:

    Every ARM platform is different, it is not a standard in the same sense as we are used to with x86 hardware. Each platform requires special handling for booting, drivers, etc.

    That is why we currently only offer two ARM images and they are both for devices we sell (SG-1000, SG-3100) and the images are only available to users of those devices because they would fail to run on anything else.

    Thanks, was wondering about running on a UBNT Edge router, that answers my question.

    The UBNT Edge routers run on MIPS64 processors from Cavium (the Octeon series), not ARM.
    MIPS64 support in FreeBSD is experimental at best. https://wiki.freebsd.org/FreeBSD/mips/Octeon
    So even if ARM as was singular as x86 it wouldn't matter because it's MIPS and not ARM  :P


  • Netgate

    But I totally understand why you might want to run pfSense on it over what ubnt is currently shipping. :D



  • Thanks, was wondering about running on a UBNT Edge router, that answers my question.

    It in the fact MIPS BE oder MIPS64 and not ARM!