Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New machine, Hardware question

    Scheduled Pinned Locked Moved General pfSense Questions
    12 Posts 6 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bereby
      last edited by

      This is my spec for a new machine
      the machince will have:
      2 WAN
      1 Lan (5 Vlans)
      2 External networks (IPVPN).
      About 100 users.
      I'm going to run Suricata, PfBlockerNG an Ntopng.
      Is this hardware Ok/Overkill ?

      Hardware:
      Case : 7677 1U CASE +200W PSU +1-2 RISER CARD
      MotherBoard: ASROCK H270M-ITX/ac
      Processor : Intel Core i7-7700 4Ghz
      Memory : G.Skill DDR4 F4-2666C19S-8GNT 8GB 2666MHz (2 units)
      Hard Disk : SAMSUNG MZ-76E250BW SSD 2.5" EVO 860 250GB
      Network : LR-LINK LREC9714HT PCIe x4 port RJ45

      Thanks

      1 Reply Last reply Reply Quote 0
      • SpearfootS
        Spearfoot
        last edited by

        With 100 users I doubt this system is 'overkill'. Not sure what brand of 4-port NIC you've specified, but FreeBSD (and therefore pfSense) is known to play well with Intel NICs, while sometimes not working so well with other brands. You might want to consider a quad Intel NIC, like this:

        https://www.intel.com/content/www/us/en/products/network-io/ethernet/gigabit-adapters/server-i350-t4v2.html

        1 Reply Last reply Reply Quote 0
        • L
          LuciousR
          last edited by

          I think the choice is good.

          1 Reply Last reply Reply Quote 0
          • DaddyGoD
            DaddyGo
            last edited by

            The hardware:

            I350-based NIC seems like a clone, and I'll go further, also because I know the LR-Link brand.
            why don't you think about them (AMD Epyc series network applience miniITX MOBOs):

            -Supermicro MBD-M11SDV-4C-LN4F-O (with original I350)
            it is free of Intel vulnerabilities and is perfect for an NGFW installation.
            The total deployment cost of the configurations (pfSense) I use is $ 750- $ 800, if you think I will send you a list of the complete system building blocks I have tested.

            Cats bury it so they can't see it!
            (You know what I mean if you have a cat)

            B 1 Reply Last reply Reply Quote 0
            • B
              bereby @DaddyGo
              last edited by

              @DaddyGo Hi.
              I would love if you could send me your specifications.

              Thanks

              1 Reply Last reply Reply Quote 0
              • B
                bereby
                last edited by

                Thanks all.
                Another question.
                If I choose a to use the XG-7100 1U, is strong enough or for my network spec I will need somthing else.

                Thanks

                NollipfSenseN 1 Reply Last reply Reply Quote 0
                • DaddyGoD
                  DaddyGo
                  last edited by

                  Hi,

                  The Netgate hardware is also perfectly suited for your purposes, but I chose the Supermicro MBD-M11SDV-4C-LN4F-O because it has an AMD CPU that is not affected by the Intel vulnerability (Meltdown and Specter).
                  https://meltdownattack.com/

                  I will send my configuration based on Epyc right away.....

                  Cats bury it so they can't see it!
                  (You know what I mean if you have a cat)

                  1 Reply Last reply Reply Quote 0
                  • DaddyGoD
                    DaddyGo
                    last edited by

                    This is my last ordered configuration.
                    I usually order from a Polish company, here in Europe, they are the cheapest.
                    The list also includes double items. (you don't have to consider double items, for example, 4 pieces of fan, one piece of spare only)

                    69e11ba5-6022-4993-b4c0-c98ca0c855e5-kép.png

                    On this website you can check the product code of the units (these are Supermicro product codes)
                    https://www.serverparts.pl/en/

                    I'm also sending an older similar configuration:

                    7bfff8bb-5a14-4b8f-8c31-cf4d9bc7542e-kép.png

                    For RAM, I used the following in both cases, the list above consists of Supermicro tested and validated items.

                    Hynix 8GB UDIMM DDR4 PC4-2666V RAM HMA81GU7CJR8N-VK,

                    for example: https://www.ebay.com/itm/124107712747

                    Cats bury it so they can't see it!
                    (You know what I mean if you have a cat)

                    1 Reply Last reply Reply Quote 0
                    • DaddyGoD
                      DaddyGo
                      last edited by DaddyGo

                      I installed 2x 8GB RAM in all cases (16GB), but even 8GB is enough for pfSense this is your choice.
                      if I can help you with anything I am still at your disposal

                      Cats bury it so they can't see it!
                      (You know what I mean if you have a cat)

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        I don't see anywhere that you have specified what bandwidth those two WANs will provide. That's the most important factor here.

                        If those are like 10Mbps each then that is definitely overkill. If they are 1Gbps it's not.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • NollipfSenseN
                          NollipfSense @bereby
                          last edited by

                          @bereby said in New machine, Hardware question:

                          If I choose a to use the XG-7100 1U

                          Please choose ... you'll have no regret when it comes to tech support and room for your growth. It's a pretty puppy too!

                          pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
                          pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

                          1 Reply Last reply Reply Quote 0
                          • DaddyGoD
                            DaddyGo
                            last edited by DaddyGo

                            @bereby said in New machine, Hardware question:

                            XG-7100

                            you're right:
                            look at its original configuration, which has an i7 CPU and a 200W power supply .....

                            who is already looking at the XG-7100, wants serious hardware...
                            (many just like to experiment or want a significant reserve in their system)

                            only this "ugly" hardware originally outlined, should be conjured up a bit of a network appliance type

                            35 -50W power consuption / rack case / all-in-one face / Intel NIC / etc.

                            (and for sure 10 Gig SFP+ WAN or other interface...)

                            ☺ jahhh and don't think I'm against Netgate hardware, (since I've already said that) it's also perfect, but you only have a choice if you know what you can do and choose
                            (Intel vs. AMD in network appliance theme)

                            Cats bury it so they can't see it!
                            (You know what I mean if you have a cat)

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.