What are people using as there pfsense firewall/router?
-
SG-3100 - low power usage
Synology NAS DS218+ with 2 hard drives for plex server, ds-video and storage - low power usage
nanohd - low power usage
2 tp-link switches - 9VDC/0.6A each
1 - Raspberry pi 3 model B running samba, apache and unifi controller
1 - Raspberry pi 4 model B as a desktop replacement1 - Desktop PC with a 430W power supply that I turn on once a week to play something..
-
The max draw on your uap-ac-lite is listed at 6.5W @JKnott... I have not thrown a kill-a-watt on mine. But even if they drew 12W.. your only talking about $1 a month at 12 cents per kwh.. So your prob half of that.. Not sure what elec cost by you..
The pro I have is listed at 9W.. I would assume these draws are max, so with clients and using max transmit power, which none of my AP are set for, 2.4 is low and 5 is medium.. So have to assume something less than what their max draw is listed as..
I would guess, all 3 of my AP together prob cost me $1 a month or something to run.
-
At home apu2e4.
At work an ancient PC which got upgraded components to support the future AES-NI requirement. If I could do it all over again, I would have gone with a Netgate appliance at work. Not because I've had any issues with the PC, but the Netgate just makes more sense especially for the workplace.
Come to think about it, I love my APU, but I probably should have done a Netgate at home too. doh!
-
Any recommendations on a small UPS for a tiny pfSense box?
-
@Raffi_ I'm using Eaton UPS, it's compatible with NUT
-
@hintslara82 said in What are people using as there pfsense firewall/router?:
What are people using these days are the watchguard red boxes still any good.
If you do a Watchguard- stay away from anything older than the XTM5 series.. I do have an XCS which was an email filter box (only 3 interfaces) that I use for testing..
But something like a newer M400 would be a better choice if you go the red box way.
-
This post is deleted! -
Yeah spammer.. Sorry folk - this guy turned out to just be another spammer..
-
Some APC models do not work with pfsense.
-
I am using Cisco UCS C210 M2 with 2x x5650 CPUs and 24 GB RAM... In there are also 2x Broadcom 57810 dual port 10G adapters, with every port on different VLAN, no LAGG, Tagging etc... All VLAN stuff is dedicated to Cisco Nexus 6000 :)
-
@kartoff said in What are people using as there pfsense firewall/router?:
I am using Cisco UCS C210 M2 with 2x x5650 CPUs and 24 GB RAM... In there are also 2x Broadcom 57810 dual port 10G adapters, with every port on different VLAN, no LAGG, Tagging etc... All VLAN stuff is dedicated to Cisco Nexus 6000 :)
Outchh ...
Do you have free electricity ?/Bingo
-
Your running pfsense on one of these?
That is nuts! ;)
How much power does that thing use??
Are you running pfsense as VM on that beast.. I couldn't see using that as a firewall/router.. Its a beast.. Old sure - but those things are beasts!!
Thing must use like 150W idle..
-
I used to have free electricity before, but now I don't :( Maybe because of that I still have no habit to pay attention to consumption...
As @johnpoz suggested UCS consumption is about 150w-200w according to CIMC where I can't login now because it require flash which is deprecated now...
But consumption of UCS is less than half of what Nexus switch consume :N6K-C6001-64P# sh env pow in
Power Supply Input:
PS Voltage Current Power Status
(Volt) (Amp) (Watt)1 224.50 1.04 233.27 ok
2 224.00 1.16 259.00 okTotal: 492.27N6K-C6001-64P#
As you see switch consume 500w of power
Depends of point of view UCS C210 is a beast, but also not :) For now it do the trick, but I already considering buying something with LGA2011 and PCI-E Gen3
pfSense run on bare metal, no VM...
I want to try TNSR because it can handle much more traffic and that's why I may need new hardware according to requirements...
BTW I will be happy if pfSense start using VPP DPDK etc... in the future because this will enhance performance of existing hardware significantly :):Edit:
I manage to get in CIMC :
-
Haha - I am good ;) hehehe
Talk about calling it pretty damn close..
I am all for enterprise gear.. In the enterprise where cost of electric is a very minor concern.. The only concern we ever had with power was that we had enough.. And if we didn't we put in more..
Thing prob sounds like small plane taxi on the runway with the fans in that thing alone..
-
@work
I'll "inherit" 4 x Cisco 9300 in Q1 2021And I just inherited a "free" HP-DLP360 G9
Now if i can convince the Boss to get 2 x 10G cards .....10G would be a nice upgrade in the TestLab.
Any suggestion for 10G cards for the HP ??
I'm not experienced w. Enterprise servers (ILO etc)
/Bingo
If you find my answer useful - Please give the post a š - "thumbs up"
pfSense+ 23.05.1 (ZFS)QOTOM-Q355G4 Quad Lan.
CPUĀ : Core i5 5250U, Ram : 8GB Kingston DDR3LV 1600
LANĀ : 4 x Intel 211, DiskĀ : 240G SAMSUNG MZ7L3240HCHQ SSD -
I have a completely overpowered Alienware R4 desktop I am using for pfsense now, my old HP died a couple weeks ago-blown motherboard. The Alienware has a 4790 CPU and 16 GB of ram.
I have never seen the CPU go over 6% and never seen the RAM usage over 20%.When this PC running pfsense dies I fully intend on getting the SG3100 or equivalent at minimum from negate. I may even go for something a bit beefier if I upgrade to GB internet by then - I prefer overpowered to "just what's needed" or (gasp) under-powered.
If you run old PC hardware and "free" PFSense I encourage you to pay for a snort subscription at minimum to support Netgate's efforts.
-
@1of1000quadrillion said in What are people using as there pfsense firewall/router?:
pay for a snort subscription at minimum to support Netgate's efforts.
Huh?? You mean a support subscription from netgate? The $30/year rule subscription doesn't support netgate or pfsense that I am aware of..
Where did you see that the rule subscription supports netgate?
-
Srry man, I didn't..I just assumed that since snort was added on to pfsense that the subscription fee or a portion of it went to netgate...is this not true?
-
No I don't see how it could.. If it did I would think they would announce that somewhere.
The best way to support netgate is either buy an appliance, or get a support contract.. Or both ;) But the tac support is a $400 a year.. So it not something your typical home user would get.
Kind of shame they got rid of the 100$ a year gold - which was a way to support..
-
@1of1000quadrillion said in What are people using as there pfsense firewall/router?:
Srry man, I didn't..I just assumed that since snort was added on to pfsense that the subscription fee or a portion of it went to netgate...is this not true?
No, none of the Snort rules subscription money goes to Netgate. The money you pay to the Snort team is for their rules only. To support Netgate, and by extension pfSense, you can buy their hardware appliances and/or subscribe to their hardware and software support offerings.
The actual Snort software is 100% free. And there are some free rules, but they all have limitations. Some of the free rule packages don't cover all the identified threats out there, while other free packages only provide you rules after they are 30 days or more old. That means you don't get protection from the most recently identified threats.
