Google 1Gb hardware recomendations



  • Hi everyone!
    I got my google fiber installed a few days ago and as many from the technical community, I don't like the router they give us. I was wondering the community would mind giving my some suggestions on hardware that I could use for a replacement PfSense box. Given the high bandwidth It looks like I will need some beefier hardware than the ALIX type of box.
    I would like to keep with something that size if at all possible.
    I have been looking at http://www.fit-pc.com/web/products/ipc2/ but would like some other option to look at if possible.

    Thanks!



  • No suggestion on hardware but you may want to take a look at this post https://forum.pfsense.org/index.php/topic,71806.msg394590.html#msg394590. Once you get your hardware up and running then you will need to configure your network so that TV and Internet are working. As far as hardware I would look at store.pfsense.org good way to get some good hardware and support the project!



  • @mikeisfly:

    No suggestion on hardware but you may want to take a look at this post https://forum.pfsense.org/index.php/topic,71806.msg394590.html#msg394590. Once you get your hardware up and running then you will need to configure your network so that TV and Internet are working. As far as hardware I would look at store.pfsense.org good way to get some good hardware and support the project!

    Thanks mikeisfly! I have seen the thread. I am on the google fiber thread with Atlantisman and have his guide.
    I did checkout the store. There are only 2 options and the one that I think would be powerful enough is the refurb 1U Dell. Now, I like the price and if I were racking this in a data center I would probably get it. But I am looking for something the size of the VK-2D13, just with more horsepower.

    Thanks!



  • @firstsage:

    Hi everyone!
    I got my google fiber installed a few days ago and as many from the technical community, I don't like the router they give us. I was wondering the community would mind giving my some suggestions on hardware that I could use for a replacement PfSense box. Given the high bandwidth It looks like I will need some beefier hardware than the ALIX type of box.
    I would like to keep with something that size if at all possible.
    I have been looking at http://www.fit-pc.com/web/products/ipc2/ but would like some other option to look at if possible.

    Thanks!

    The Intense PC 2 won't have working NICs under 2.1.  It may work under 2.1.1 but I'm not sure about the i218 port.  I don't know that anyone has tested anything but the i210/i211.  A safer bet would be the first generation part, though it's still really expensive for what you get.


  • Netgate Administrator

    Do you want to run any packages?
    Do you need it to be fanless?

    Both those things will reduce your options and increase the price.

    Steve



  • Whats your budget? How many working NIC ports do you want? You do know realtek is not going to move 1Gb reliably right?

    Being small (assuming quiet) and powerful is not cheap. I built a fanless system capable of what you want but it was because I didn't mind spending on a hobby. I would ballpark $500~800 with current prices.

    For a practical solution and not a hobby DIY build: a dual 3.4ghz i3 lenovo TS140 server is $265 on amazon right now, a dual port intel 82571 is ~$25 on ebay (search X3959 or NC360T) and I'm guessing you have a spare disk or thumbdrive. I've seen the i3 as cheap as $220, the quad 3.2ghz xeon was $300 last month, heck of a deal if it drops again.

    There is no way to build a comparable barebones system yourself as cheap, not even with microcenter discount bundles.

    Its not small, its a micro ATX tower but its fast, cheap and actually very quiet. (confirmed in person)
    Its a server chipset (C226) with ECC ram, as a bonus the onboard NIC and AES-NI in the cpu will eventually work in a future version of pfsense but you don't need them to route and firewall 1Gb.


  • Banned

    Mind you that Dell among others have onboard NSA watchdogs embedded in the hardware.



  • http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=271393932928

    This board $50 and an i5-2520m ~$55 might do you. I picked up 4 of these recently. Can't really beat the feature set for the price.

    Dual Intel LAN,
    Intel vpro with ip KVM, serial over lan
    CF card slot (Watch mounting height)
    Fullsize minipcie
    Pretty low power
    m-itx form factor



  • @stephenw10:

    Do you want to run any packages?
    Do you need it to be fanless?

    Both those things will reduce your options and increase the price.

    Steve

    Hi Steve!
    I do want to run packages. Fanless is not a requirement. Mostly looking for lower power and a small foot print.

    @Aluminum:

    Whats your budget? How many working NIC ports do you want? You do know realtek is not going to move 1Gb reliably right?

    Being small (assuming quiet) and powerful is not cheap. I built a fanless system capable of what you want but it was because I didn't mind spending on a hobby. I would ballpark $500~800 with current prices.

    For a practical solution and not a hobby DIY build: a dual 3.4ghz i3 lenovo TS140 server is $265 on amazon right now, a dual port intel 82571 is ~$25 on ebay (search X3959 or NC360T) and I'm guessing you have a spare disk or thumbdrive. I've seen the i3 as cheap as $220, the quad 3.2ghz xeon was $300 last month, heck of a deal if it drops again.

    There is no way to build a comparable barebones system yourself as cheap, not even with microcenter discount bundles.

    Its not small, its a micro ATX tower but its fast, cheap and actually very quiet. (confirmed in person)
    Its a server chipset (C226) with ECC ram, as a bonus the onboard NIC and AES-NI in the cpu will eventually work in a future version of pfsense but you don't need them to route and firewall 1Gb.

    I am ok with a few hundred $$ on the budget. ~$500 would be fine. Fanless is not a requirement. Just small foot print.
    I figured the Realtek would not move that much data reliably. I really only need 2 nic's. I have a switch that can handle the rest.
    Can you send me the link of the server you are referring to on amazon?

    @bryan.paradis:

    http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=271393932928

    This board $50 and an i5-2520m ~$55 might do you. I picked up 4 of these recently. Can't really beat the feature set for the price.

    Dual Intel LAN,
    Intel vpro with ip KVM, serial over lan
    CF card slot (Watch mounting height)
    Fullsize minipcie
    Pretty low power
    m-itx form factor

    Thanks for the link. I'll take a look!



  • So what would the minimum CPU I would need be? Would I need an I3? I found this http://www.newegg.com/Product/Product.aspx?Item=N82E16856107095 and the only thing that I am not sure about would be the CPU.


  • Netgate Administrator

    The D525 won't pass more than ~500Mbps and that's without any packages.

    You will need something at least as powerful as a low end current Celeron. The, slightly older, G530 for example has been proven sufficient to firewall 1Gbps. If you want to run Snort or Squid you'll want something more powerful than that.

    Steve



  • My recommendation is http://www.newegg.com/Product/Product.aspx?Item=N82E16813128679
    we also have 1 Gbit connections available in Romania from RCS & RDS ISP and these boards based on Celeron 1037U and 2 Gbit NICs are reported to match these famous 1000mbps



  • Can you send me the link of the server you are referring to on amazon?

    Sure, its not small but its fast, cheap and quiet.

    Mind you that Dell among others have onboard NSA watchdogs embedded in the hardware.

    If that is a real risk for you, stop buying new computer hardware at all. (seriously)
    Its pretty much all fabbed in china or taiwan so PRC can add whatever they want with some extra transistors, and by the same token so could NSA et al. Ditto goes for anything that comes with factory firmware. (aka all motherboards, nics, harddrives, etc)
    You cannot secure a mass market commodity supply chain against nation-state threats, period.



  • @bryan.paradis:

    http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=271393932928

    This board $50 and an i5-2520m ~$55 might do you. I picked up 4 of these recently. Can't really beat the feature set for the price.

    Dual Intel LAN,
    Intel vpro with ip KVM, serial over lan
    CF card slot (Watch mounting height)
    Fullsize minipcie
    Pretty low power
    m-itx form factor

    That is pretty nice, did it come with the heatsink hardware? Shows in the picture but their listing info is sparse.

    Finding cheap socket G2 laptop cpus is easy but getting a desktop cooler with the proper mounts is not.



  • Thanks everyone for the ideas!
    Here is what I am thinking. Please let me know your thoughts.

    http://www.newegg.com/Product/Product.aspx?Item=N82E16811108196  case
    http://www.newegg.com/Product/Product.aspx?Item=N82E16820220867  RAM
    http://www.newegg.com/Product/Product.aspx?Item=N82E16813128679  board suggested by maurer
    http://www.newegg.com/Product/Product.aspx?Item=N82E16820171667  Went SSD so I dont have to worry about moving parts and still have some storage.



  • I was looking for the longest time a dedicated platform but I'm excited to be venturing into a HP microserver gen8 running esxi with pfsense + xpenology + win7 Remote Desktop server. I think this will justify the 30w that the microserver will draw.

    Just food for thought.



  • @GoldServe:

    I was looking for the longest time a dedicated platform but I'm excited to be venturing into a HP microserver gen8 running esxi with pfsense + xpenology + win7 Remote Desktop server. I think this will justify the 30w that the microserver will draw.

    Just food for thought.

    GoldServe: This is going to make me think a bit….. I picked up a Synology 213j hoping to run Plex, but alas Plex so far is not supporting the armv7 proc. This might be the answer to my issue. I could get this, run Pf and some other OS that can run Plex....
    Thanks for posting this! I am going to think about this some more.



  • Ok so GoldServe got me thinking. I have an i7 kinda laying around, I use it for some video encoding. I also have a 3GHz Celleron D as well….. I would rather use the Celleron D for a VM box. ATM I really only need a Pfsense box and an OS box to run Plex. Other than that, I have what I need on my main comp. What are the thoughts on the hardware using the Celleron D? If needed I think I could find a dual core cpu to swap out.....  Its running 2GB of DDR2 RAM, so I am thinking the only weak link is the CPU.

    Thoughts?



  • @Jason:

    The Intense PC 2 won't have working NICs under 2.1.  It may work under 2.1.1 but I'm not sure about the i218 port.  I don't know that anyone has tested anything but the i210/i211.  A safer bet would be the first generation part, though it's still really expensive for what you get.

    Are you sure about that ? Can someone confirm is the intense PC 2 will work or not under 2.1.1 ?



  • Some time ago I saw the new Avoton-boards going round. I don't know about drivers in FreeBSD 8.3 and if the most important ones are included- maybe someone can help out here? I'd suggest the supermicro board: http://www.newegg.com/Product/Product.aspx?Item=N82E16813182851
    It's quite powerful, and as I'm writing this I read about the ethernetcontroller being supported in 2.2.. Perhaps a nice board for the future- or very enthusiastic bleeding-edge pfsense-fans in non-productive environments.



  • I've got the C2758 variant.  Works great under 2.1.1 now that the upgraded Intel drivers are back in the build.  The only warning I'll give is that you'll have a grand total of (2) working USB ports.  Most of the ports on this board are 3.0 and that doesn't work yet.


Log in to reply