Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Looking for Low Power Budget Build Suggestions (BC, Canada)

    Scheduled Pinned Locked Moved Hardware
    13 Posts 9 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      strigona
      last edited by

      I used to have an old IBM server that was big, power hungry (~350W) and loud. I was running pfSense as a VM and it was fine, however I could no longer justify it, so I sold it and reverted to using my ISP's supplied modem/router.

      My requirements:

      • Low power: 15W -ish? I don't want an old PC eating power and spewing out heat
      • Bandwidth support: Min: 200Mbps, though some some room for growth would be nice. 300/300 Mbps plans are on the horizon in my area.
      • Form factor: I'm flexible, but smaller would be better. Network rackmount is OK (~12" deep max)
      • Price: Ideally under $200 CAD all in
      • AES-NI / pfSense 2.5 compatible
      • OpenVPN: I'd use it, but not for anything beyond light remote access.

      Options:

      • Espresso.bin - looks good, bug no ETA on support
      • APU2C2/APU2C4 - is this still a good option?
      • ???
      1 Reply Last reply Reply Quote 0
      • T
        TheNarc
        last edited by

        I've had good luck with the Zotac CI323 Nano. The updated model is the CI327 Nano. However, while it looks like you can get either one of those for US$150 in the states, amazon.ca and newegg.ca both list them for just over CAD$200. And you need to add RAM and a hard drive. I've been running with only a 4GB stick of RAM and a 32GB SSD, and I run with 3 concurrent VPN client tunnels, Snort, and pfBlockerNG. So you could plausibly still stay under CAD$300 maybe. These Zotac boxes do use Realtek NICs though, so you'd also need to use the official Realtek driver:
        https://forum.netgate.com/topic/92884/zotac-zbox-ci323-nano/111

        There may yet be better and cheaper options; I can only speak to my personal experience.

        1 Reply Last reply Reply Quote 1
        • S
          strigona
          last edited by

          Thanks for the reply. Definitely worth considering the Zotac if nothing else turns up.

          SammyWooS 1 Reply Last reply Reply Quote 0
          • SammyWooS
            SammyWoo @strigona
            last edited by SammyWoo

            @strigona Am running an often maligned (everybody has an opinion) MiniSys 4 port, cheapest from AlliExpress, I've seen under usd$200, add your own SSD+Ram. 10 WATTS! and a side benefit NO FAN, although it does run a little warm (50c idle) but if u have fan-ed rack it should be fine, be sure to get the AES-NI ready, Intel NICs favored by Pfsense. You maybe able to get away with it looking for a used Atom-class, 300+ Passmark fine, from eBay. Just don't buy anything proprietary, Pfsense loads on any standard PC box fine.

            1 Reply Last reply Reply Quote 0
            • R
              rnatalli
              last edited by

              I like the Qotom boxes myself, especially the i3 which has AES-NI and uses Intel NICs.

              SLIMaxPowerS 1 Reply Last reply Reply Quote 0
              • SLIMaxPowerS
                SLIMaxPower @rnatalli
                last edited by SLIMaxPower

                @rnatalli until they fail.
                I have just replaced my current system (n54l) with an i7 4770 with multiple intel pcie nics 80+ PSU so its low power with way more grunt than I will ever need.

                My current system CPU is always above 60% and 8gb out of 16gb ram usage. that's without snort or vpn active.

                edit. around 300aud

                S 1 Reply Last reply Reply Quote 0
                • M
                  mdahal
                  last edited by

                  @SLIMaxPower Curious what package you are running to have 60% load on i7. From experience, the cpu intensive application is ips/ids (Snort,Suricate) and VPN.

                  SLIMaxPowerS 1 Reply Last reply Reply Quote 0
                  • SLIMaxPowerS
                    SLIMaxPower @mdahal
                    last edited by

                    @mdahal Sorry I was talking about the N54l with 16gb ecc and intel nics. I am running a large list through pfblockrng, plus snort (not actively blocking), schedules (which don't block udp - apparently fixed in 2.5+, plus some less intensive options.

                    The QotoM and PFsense etc appliances are fine for basic/intermediate stuff. Packages should be run off other clients/vm's to take use of performance.

                    The i7 will not even struggle even with 6 intel nic's - still deciding on how much ram I should jam in it though.

                    To me it's a an investment for something I know will run for years and is generally cheap on power once configured, and easy to replace if your a smart.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      @slimaxpower said in Looking for Low Power Budget Build Suggestions (BC, Canada):

                      schedules (which don't block udp - apparently fixed in 2.5+

                      Hmm, I'm not aware of that. Is there a bug open/resolved for that? I don't see one. And do you mean in 2.4.4?

                      Steve

                      SLIMaxPowerS GertjanG 2 Replies Last reply Reply Quote 0
                      • SLIMaxPowerS
                        SLIMaxPower @stephenw10
                        last edited by

                        @stephenw10 If you check the firewall/schedule thread your will find many users with complaints about traffic not getting cut off when schedules expire. udp traffic seems to be the main culprit.

                        1 Reply Last reply Reply Quote 0
                        • GertjanG
                          Gertjan @stephenw10
                          last edited by Gertjan

                          @stephenw10 said in Looking for Low Power Budget Build Suggestions (BC, Canada):

                          Hmm, I'm not aware of that. Is there a bug open/resolved for that? I don't see one. And do you mean in 2.4.4?

                          Blocking scheduling not quite working and https://redmine.pfsense.org/issues/8820
                          Some issue with "pfctl" ....
                          This issue isn't a goal for the upcoming "2.4.4" ( https://redmine.pfsense.org/projects/pfsense/issues?fixed_version_id=46&set_filter=1&status_id=o )

                          No "help me" PM's please. Use the forum, the community will thank you.
                          Edit : and where are the logs ??

                          SLIMaxPowerS 1 Reply Last reply Reply Quote 0
                          • SLIMaxPowerS
                            SLIMaxPower @Gertjan
                            last edited by

                            @gertjan that is only part of the problem. even after manually resetting the states udp reconnects.

                            1 Reply Last reply Reply Quote 0
                            • S
                              Solitary Man @SLIMaxPower
                              last edited by

                              @slimaxpower said in Looking for Low Power Budget Build Suggestions (BC, Canada):

                              @rnatalli until they fail.
                              I have just replaced my current system (n54l) with an i7 4770 with multiple intel pcie nics 80+ PSU so its low power with way more grunt than I will ever need.

                              My current system CPU is always above 60% and 8gb out of 16gb ram usage. that's without snort or vpn active.

                              edit. around 300aud

                              Hi @SLIMaxPower would it be possible to get some more details of your build please? I'm also in Australia, finding it hard to put together something low-power for around the $300 level that would suit.

                              Thanks!

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.