Raspberry PI



  • I just got my Raspberry PI model B today and was wondering if anyone has considered turning one of these bad bears into a pfSense device?

    Yes, there are limitations with the hardware but nothing immediately looks like a deal-breaker.  I don't think there is a FreeBSD port for it yet, but I assume I'll eventually see some support for it.

    More info about the project can be found at:
    http://www.raspberrypi.org




  • Rebel Alliance Developer Netgate

    I doubt it'll happen any time soon…

    Even if FreeBSD could boot on it, it would still require work on some of our kernel patches to account for the architecture, and that's also assuming that the ports/packages we need will even compile on ARM.

    http://www.freebsd.org/doc/en/articles/committers-guide/archs.html
    ARM is a Tier 2 architecture, so there is no guarantee anything will be kept running/compatible...



  • The only real hope beyond just a "thing to try to do" is the platform gaining wide acceptance (Raspberry Pi, that is).  ARM has a pretty good installed base, and it might get some legs as it matures more (not that it isn't mature already).  So while I won't hold my breath, I will hold out hope.  :)


  • Rebel Alliance Developer Netgate

    Well rally around the FreeBSD folks working on support for the Pi and once they get things improved to a point where it will be feasible to work with, it can be investigated, though without some dedicated funding I'm not sure how likely that will be.



  • There is most certainly some good projects in the fbsd community on this exact item.

    https://wiki.freebsd.org/FreeBSD/arm
    https://wiki.freebsd.org/FreeBSD/arm/Raspberry Pi
    https://github.com/kientzle/crochet-freebsd
    http://ogris.de/howtos/freebsd-raspberry.html
    http://kernelnomicon.org/?p=261
    https://github.com/gonzoua/freebsd-gpio

    My suggestion is get Crochet build an image (https://github.com/kientzle/crochet-freebsd) and a RaspberryPI start playing around.

    I have been able to install fbsd with ipfw + dummynet and ipf + altq (tested and working). I have gotten python up and running and the gpio stuff (very cool), was about to start making an interface in python + pyramid + other dingbats but realised that pfsense may do what i need.



  • Even if it ever got to that point, the USB based NIC (and only one of them at that) is going to simply not be the hardware you need for this application, not on that slow of processor.

    Now, on the other hand, I DO have a Raspberry Pi in one of my pfSense boxes :) It's running Fedora and is nothing but a RADIUS server.



  • hi. is there any success storyies for raspberry running pfsense?



  • @binary_dreamer:

    hi. is there any success storyies for raspberry running pfsense?

    None, and unlikely for some time.
    Your next best bet is openwrt.



  • @thermo:

    @binary_dreamer:

    hi. is there any success storyies for raspberry running pfsense?

    None, and unlikely for some time.
    Your next best bet is openwrt.

    did anything change?



  • Totally interested in this project if it ever runs :-)



  • I've encountered a new board - based on the Banana Pi, which is essentially a beefed up RPi: BPi-R1.
    I'm considering playing with this & IPFire as solution - still only an idea atm.


  • Rebel Alliance Developer Netgate

    The popularity of the Pi given its specs still baffles me. I know it's fun to hack on, but there are other similar offerings like the BBB that are comparable in price but much more attractive as a platform.



  • Any news ?

    It's possible to run pfSense on Raspibery PI?



  • @fellipeh:

    It's possible to run pfSense on Raspibery PI?

    No.
    Not yet and pretty sure not in the future. But this has been written dozens of times, even in this thread. Dare to read?


  • Rebel Alliance Developer Netgate



  • Hi I am not a linux or hi tech network guy.. but I think with using vlan rasberry pi can be connected to t switch like 8 port layer 2 switch like and 1810 Hp 8port switch and a rasberry pfsense should be able to make use the switch as lan and wan ?



  • @rabim747:

    Hi I am not a linux or hi tech network guy.. but I think with using vlan rasberry pi can be connected to t switch like 8 port layer 2 switch like and 1810 Hp 8port switch and a rasberry pfsense should be able to make use the switch as lan and wan ?

    As Jim said earlier in the thread, a Raspberry Pi makes a very poor candidate for a serious network device. It has a single NIC that could potentially be used with VLANs and a suitable switch, but it is a low performance USB connected NIC. I don't know enough about the hardware to know how well it works with 802.1q VLAN tagging.

    There are better candidate boards for pfSense if an ARM build was produced. The Beaglebone Black is a similar price to the Raspberry Pi and has a much better NIC, though I haven't characterised the BBB as a possible platform to run an ARM build of pfSense if one is produced.

    I think it very likely that there will be an ARM build of pfSense at some point in the future. If one is produced, I think it's best to select a hardware platform on the basis of price, stability and performance, not decide on a hardware platform that you wish to run pfSense on. There are many excellent and inexpensive ARM boards available these days, each with different strength. It is best to select the board most suited to your task.



  • @rabim747:

    Hi I am not a linux or hi tech network guy.. but I think with using vlan rasberry pi can be connected to t switch like 8 port layer 2 switch like and 1810 Hp 8port switch and a rasberry pfsense should be able to make use the switch as lan and wan ?

    But a MIPS fork instead of an ARM fork would be bring us up to use the UBNT EdgeRouter series from 5 Port and
    and 55 € to the Pro model and 360 € that would be in my eyes making more sense to go, related to the circumstance that the UBNT models or EdgeRouter series is a similar used wise hardware.

    For sure the newest Tilera TileGx 100 core is ARM based and would be something more likely a
    firewall device to solder and get likes a RaspBerry PI.



  • @David_W:

    …better candidate boards ... The Beaglebone Black ...

    If you stop by the netgate shop you'll find BBBs already.
    gonzopancho once mentioned that they are there for a reason.

    Another nice device I just saw is the MinnowBoard.
    Maybe you could use that as a router-on-stick, but be warned that FreeBSD is NOT mentioned in the compatibility list! Looks like fun none the less!


  • Netgate

    FreeBSD runs fine.

    Also: http://imgur.com/gallery/hnvhp/new  :-)



  • Any news ?

    It's possible to run pfSense on Raspibery PI?



  • No.
    Wouldn't make too much sense with only one Ethernet port and that one is hanging off from USB already.


  • Banned

    Raspi 3 has wifi and LAN, makes two interfaces.

    Would be a cool personal firewall for public wifi. Especially with built-in tunnels and routing through these tunnels. In my opinion.



  • I wouldn't use the Pi performance as a reason against a port.

    I have no problem sustaining 100mb/s of SFTP traffic through the ethernet on a Pi2.  So, that includes encryption as well as TCP processing.

    I haven't benchmarked routing through a Pi (I'll add that to my todo list), but I've used a Pi as a web server to multiple networks in a lab using USB ethernet and have never had a performance issue.

    Likewise the VLAN capability.  A friend of mine uses a Pi as a DHCP server to 16 networks via VLANs on a Pi-1B.

    I think the Pi would be a good low-end platform for PFsense.  It's not going to be Enterprise capable, but that's fine.  Still plenty of other uses at sub-100Mb/s speeds.

    Brad



  • The Pi was a device originally invented for children and students to learn modern computer science.

    Having pfSense on Pi would be a great step in this direction, making students familiar with pfSense will get more bussiness to pfSense in the future (or ESF, or Netgate or whoever will own pfSense rights at that time). It's worth the investment, trust me.



  • @bsilva:

    I think the Pi would be a good low-end platform for PFsense.  It's not going to be Enterprise capable, but that's fine.  Still plenty of other uses at sub-100Mb/s speeds.

    While I am a great fan of the pi's (follow ever since they came out, and they do some terrific work here at home), I must admit I have never had the urge to put pfSense on it.
    Think of it like your spoons at home. I'm happy with my spoons, but they do a terrible job at cutting my bread. So I don't use them for it  ;D

    Just kidding  ;) If you want arm + low power, I have seen something like an sg-1000 in the store… The price is a bit more, but you get what you pay for. If you subtract the $99 (1y GS, which is also a value), it's not too far of a pi3 anyway. And though I haven't seen any real specs or schematics yet, I suppose the design is better fit for a FW then a PI would be.

    But of course, these are my thoughts, you are entirely entitled to yours.....


  • Netgate

    We're doing the SG-1000 for $149, and that price includes Gold.

    If your needs are met by 2 ports, 200-520Mbps of performance (depends what you measure, and how), you have the world's best open source firewall, in the palm of your hand, with a complete learning environment, (book, hangouts, forum, email), auto config backup and more, all while you're supporting the project.

    If you have need of more ports and/or performance, we have solutions, both current and planned that will address these as well.



  • A pfsense port on ARM opens up a whole new world on enthusiast routers.

    The question is though, can ARM perform up to the standard set by pfsense especially when the RAM can be as small as 256MB.


  • Galactic Empire Netgate

    @W4RH34D:

    A pfsense port on ARM opens up a whole new world on enthusiast routers.

    The question is though, can ARM perform up to the standard set by pfsense especially when the RAM can be as small as 256MB.

    Not on Raspberry Pi. People will soon learn that ARM is much more than hobbyist platform with low hardware specs. Stay put :)



  • @jwt:

    We're doing the SG-1000 for $149, and that price includes Gold.

    If your needs are met by 2 ports, 200-520Mbps of performance (depends what you measure, and how), you have the world's best open source firewall, in the palm of your hand, with a complete learning environment, (book, hangouts, forum, email), auto config backup and more, all while you're supporting the project.

    If you have need of more ports and/or performance, we have solutions, both current and planned that will address these as well.

    This is very nice. But cant really use it as a "travel" router/vpn.

    power off the laptop put the utp cable in the laptop and connect the wifi part to your router/wifi access points elsewhere and you got a really nice travel Pfsense. Dont need super speeds from it.

    so in a sense the Pi3 is very nice for that. or connect the pi 3 to your laptop via bluetooth if that also works nice.

    Still looking for a good solution for that.

    edit:
    http://shop.udoo.org/eu/preorder-x86.html

    this would be a nice little one. It has a Intel CPU so it can run pfsense.


Locked