HP Desktop w/Intel Core i5-7400

JD69

Hi,

Been studying pfSense and looking at hardware, reading online and I just would like to know if y’all would suggest using the desktop I mentioned to create a router, firewall, proxy, VPN server out of it. Or buy something newer online that already has all of the functions available it it?

I’m a desktop analyst by trade with some networking knowledge. I can read documentation and follow it quite well and wouldn’t mind having to take care of things myself. Also don’t mind learning new things from time to time as long as it doesn’t interfere with binge watching my movies and shows.

On the other hand, I don’t mind spending some money and using the desktop for something else which, allows for more binging.

Want to be able to use the device to have a couple of machines on VPN and get close to 1Gb speeds if I upgrade from current 500 Mbit package. Also would like to have proxy capabilities and ad blocking.

The specs of the machine I have are:

Intel Core i5-7400 (I believe it has AES- NI capability)

16 GB DDR4

256 GB SSD nVme

1 1Gb LAN Port

WI-FI Capable

Should have one PCIE Slot open. Need to check this.

Budget for something new is no more then $450.00

I would really appreciate any constructive feedback. Thank you in advance!

stephenw10

You want to be able to pass 1Gbps encrypted over VPN? What type of VPN?

The on-board WIFI probably won't work but you're much better off using an external AP. Currently.

Steve

Patch

@JD69 said in HP Desktop w/Intel Core i5-7400:

Want to be able to use the device to

I suggest start by looking closely at the Netgate hardware and it's documented performance. Their systems are more optimised that you will achieve so interpret their specs as your minimum. See https://www.netgate.com/appliances

@JD69 said in HP Desktop w/Intel Core i5-7400:

and get close to 1Gb speeds

@JD69 said in HP Desktop w/Intel Core i5-7400:

1 1Gb LAN Port

So you will need to add at least another NIC
Ram & Disk size specified are likely to be far more than will be required for your stated application

JD69

I’ve read about the Netgate devices and something I don’t understand is when I read that the firewall, for instance, reads IMIX Traffic: 249 Mbps. Does that mean I’m only going to get that speed out of the device? (Please be understanding with me. I’m not an expert networking person. Thank you!)

Also, I left out that if I were to use my desktop, I’d add a four port Intel NIC to the machine. This would give me the four ports I need to connect the devices I’d want connected later on if I got it working the way I need it to.

I currently have Spectrum cable internet service with 500 Mbps and 1Gbps is available but, I want to be able to get the best I can out of it. As for WI-FI, I’d use the WI-FI box that I lease from them if possible.

Thank you all again for your understanding and responses.

stephenw10

Most traffic is limited by packets per second the firewall/router can pass so the actual throughput in Mbps varies with the packet size. IMIX traffic attempts to replicate real world traffic with varied packet size. An iperf test or using speedtest.net uses all full sized packets so gives a greater total.

That i5 would pass 1Gbps very easily if you're just looking at the firewall/router throughput with full sized packets.

If you want to see 1Gbps encrypted traffic where pfSense is running the VPN that is a far higher load. The CPU would probably do it though with the right VPN config/type.

Steve

AndyRH

@JD69 said in HP Desktop w/Intel Core i5-7400:

As for WI-FI, I’d use the WI-FI box that I lease from them if possible.

This will be on the wrong side of pfSense is you want pfSense to manage that traffic.

JD69

Ok, sounds like I’ll try my desktop and order a four port NIC. I’ve read Intel is the best. Anyone have suggestions on a model?

As for the WI-FI, if I can have traffic just pass thru one port of the router to the WI-FI I’ll do that as it has it’s own firewall.

stephenw10

I would look at OEM rebranded used NICs: https://forums.servethehome.com/index.php?threads/list-of-nics-and-their-equivalent-oem-parts.20974/

There are an alarming number of fake Intel NICs around if you're looking at new devices.

JKnott

@JD69 said in HP Desktop w/Intel Core i5-7400:

Been studying pfSense and looking at hardware, reading online and I just would like to know if y’all would suggest using the desktop I mentioned to create a router, firewall, proxy, VPN server out of it. Or buy something newer online that already has all of the functions available it it?

You're going to want to have more than one NIC. While you might be able to add a NIC to that box, you could also buy one that already has more than one. I bought the Qotom computer described in my sig and am quite happy. The CPU runs around 2-3% when getting over 900 Mb down, with speedtest.

fireodo

@JKnott said in HP Desktop w/Intel Core i5-7400:

The CPU runs around 2-3% when getting over 900 Mb down, with speedtest.

Just out of curiosity - what packages are you running on your pfsense?
Thanks,
fireodo

JD69

I was going to ask the same question about the packages.

I did consider this machine but, I want to learn pfSense before jumping into more money. Besides, what I have available to me in specs is considered good. I ordered a four port i350 pcie v2 card last night for $90.00. Found on eBay and going by the pictures I had them send me, it’s a genuine i350 v2.

Going to setup a VM tonight or tomorrow to start checking pfSense out and get a feel for her. From what I’ve been reading it’s not too complex. So I should be able to understand it, even at my age.

JKnott

@fireodo said in HP Desktop w/Intel Core i5-7400:

Just out of curiosity - what packages are you running on your pfsense?

apcupsd
Backup
frr
iperf
nmap
openvpn-client-export

fireodo

@JKnott said in HP Desktop w/Intel Core i5-7400:

apcupsd
Backup
frr
iperf
nmap
openvpn-client-export

Thanks - that explains why your CPU-Load is so low at high speed transfer! (no pfblocker and or IDS/IPS)