Hardware Available at the pfSense Store
-
We now offer direct hardware sales via our online marketplace. There are 3 platforms available now, with more to come in the future.
Check out our current offerings here:
https://store.pfsense.org/hardware/ -
No company name, no address, no phone, no email, no privacy policy? ???
-
Figure it's implied that it's ESF, where you can find full contact details and a privacy policy. But yeah that should be more clear on the site. Thanks for the feedback.
-
Don't get me wrong, I think it's great, especially since some models aren't readily available everywhere/for everyone.
-
@cmb:
Figure it's implied that it's ESF, where you can find full contact details and a privacy policy. But yeah that should be more clear on the site.
http://electricsheepfencing.com/#our-policies says "We only do services, no shipping."
Definitely needs some indication of shipping pricing etc.The store does not list any software - wouldn't this be a good place to list support contracts?
What legal jurisdiction does ESF operate under? I see the company is based in Texas, but should say specifically.
-
Speaking of hardware - I see one of the adverts in this web site is www.netgate.com pushing their m1n1wall box running on an alix. Is this appropriate adverts for pfsense's own web site?
-
Speaking of hardware - I see one of the adverts in this web site is www.netgate.com pushing their m1n1wall box running on an alix. Is this appropriate adverts for pfsense's own web site?
Personally, I want to stop the adverts altogether. Others in the company support continuing them for partners.
Some things you might want to consider, however:
-
Netgate is, by far, the largest and longest supporter of the project
-
pfSense HQ is co-located with Netgate in our Austin, TX offices
-
Netgate acts as the shipping department for the store
-
Netgate's owner is the majority shareholder of ESF (you know, the company behind pfSense)
Given these, your concern, while understandable, seems a little … apprehensive?
If there were ever a company closely aligned with pfSense, it is Netgate.
-
-
The shop is a very good idea.
Are you going to sell many different hardware appliances or will you stick to like 3 to 5 different "grades"?I bought the USB stick to support you a little bit :)
-
I don't know what you mean by "many".
I would say that there will be "several" hardware offerings this year.
-
I was going to support the good cause and buy two machines from you. However, there is a slightly, iny tiny, small, problem ;D ;D ;D
I attached a screenshot.
This is for shipping to The Netherlands. If I may, the UPS/Fedex's of this world must be completely mentally retarded. For that amount of money I can depart from Schiphol Airport Amsterdam and fly to New York myself.
So, sorry, I really wanted to buy two machines and in the process support the good cause :-[
On another note: couldn't you go via Amazon Marketplace? I've never had these insane shipping costs when ordering from Amazon USA.
Just a thought :P
-
@Hollander:
If I may, the UPS/Fedex's of this world must be completely mentally retarded. For that amount of money I can depart from Schiphol Airport Amsterdam and fly to New York myself.
ROFL… Insane indeed.
-
…not to forget the customs fun. And then you end up with trash like this (see photo),, btw. inside there were two SAS HDDs, I desperately needed them, otherwise would have returned them....
But in the Netherlands you have other options:
http://www.applianceshop.eu/index.php/?___store=en
:-)
...they do some advertising on the forum, too and I was very satisfied with the service!
-
@gonzopancho:
I don't know what you mean by "many".
I would say that there will be "several" hardware offerings this year.
Any plans on adding anything soon? There's a pretty big gap in price and functionality of what's currently available. Habey has a nice looking 1U that I've been thinking about getting…might even pay a little more if it came in red ;)
http://www.habeyusa.com/products/fw-1044-1u-4-gbe-w-bypass-segment-fanless-network-hub/Edit: speling
-
The C2758 was just added about a week ago.
https://store.pfsense.org/c2758/
It's sold out already, more are on the way.There will be more to come.
-
@chemlud:
…they do some advertising on the forum, too and I was very satisfied with the service!
Actually, they don't.
-
I love the idea of pfSense selling their own hardware, but am lost as to what the unit capabilities are. the C2758 would be great, but how many concurrent connections would it support? Sorry, but I'm not knowledgable enough to translate the raw pass-through numbers to connections.
We're a catholic k-8 school in need of firewall and content filtering…..Currently running a sonicwall 2400
-
May firewall vendors artificially limit "connections". Sonicwall is one such vendor.
We do not.
See the discussion here under "Feature Considerations"
https://www.pfsense.org/hardware/#sizing -
@gonzopancho:
May firewall vendors artificially limit "connections". Sonicwall is one such vendor.
I don't believe they do (not that I would ever recommend those horrible pieces of junk to anyone). I think he's referring to this statistic:
Per http://www.sonicwall.com/us/en/products/NSA-2400.html#tab=specifications
Connections per second 4,000/secI have no idea where they get those numbers from, but their other numbers are very similar to the c2758. I don't believe anything Dell says about Sonicwall, though. Those things perform terribly and are a nightmare to administrate and exhibit very odd behavior.
-
No arguments from me on the sonicwall. They've been a giant pain in my butt as long as I have had to deal with them. And that was even BEFORE Dell took over!
And no, I have no idea where they pull those numbers from. I guess I was more concerned with the throughput. But I guess if I load it up with memory it should handle the web filtering. I'll wander the boards to find out more about that.
Thanks for slapping me upside the head to realize exactly what I should be looking at!
-
I'm not sure what they mean by "connections / sec".
Typically this is a web server metric.
A dual Intel Xeon X5670 (2 * 6 cores @ 2.93 GHz, 2 threads per core) with 24GB of RAM will do 500K connections/sec to nginx.
I've not measured it, but the C2758 cores each benchmark pretty close to a 5600 series ("Westmere ") Xeon. The C2758 only has 8 cores (not 12 in the system above) and they each run at 2.4GHZ, not 2.9GHz, but overall, I'd bet the C2758 can do at least 400K connections/sec in a similar benchmark.Maybe they mean new connections / second to the IPsec endpoint. We haven't measured it.
If they mean packets per second (pps), then that number sucks by comparison. In an Untuned state, the hardware will run 585Kpps per interface without the overhead of pf. Those are minimum-sized (64 byte) packets.
With a bit of tuning, and a single stateful rule installed in the packet filter, the rate goes up to nearly 800Kpps.
Their IMIX is oddly stated at 1280 byte UDP packets. That's not mixed. Typical firewall vendor BS.
http://en.wikipedia.org/wiki/Internet_MixAssuming an IMIX of PPS * ( 7*(40+14) + 4*(576+14) + 1*(1500+14) )/12*8, the IMIX thoughput for this is 2.267Gbps, which, you will note, is faster than the interfaces. This shatters the quoted IMIX throughput for the Sonicwall NSA 2400 (235 Mbps)
And we're after far (far) more. Stay tuned. I LOVE this hardware, and plan to make the most out of it for pfSense.
By comparison, here are the numbers for a PC Engines APU:
154.17 Kpps - raw routing (est IMIX throughput = 437 Mb/s)
88.12 Kpps - with a single, stateful 'pf' rule installed (est IMIX thoughput = 250Mbps)Note that even this is faster than the NSA 2400 you pointed to.
So there it is, a real-world result, the C2758 is about 10X faster than an APU, and I've just gotten started.