Hardware advice: low-power home use
-
Hi all,
I've been looking into PFSense for a couple months, and needing some hardware advice. I've been doing a lot of reading, on this board and elsewhere, but as yet haven't been able to make any hardware decisions.
Use case:
-
Home use. I plan on handling wireless through a Ubiquiti AP; rarely exceed 10 wireless clients simultaneously, most often 2-4. Currently I have 2-3 wired clients, but want to allow room for growth.
-
VPN - usually only one user at a time.
-
Current internet connection is 20/1, expect to increase to 50/5 soonish. I understand that any reasonably recent hardware should be able to handle this, but again, would like to allow room for growth, particularly on the uplink side with VPN.
-
Packages:
-
VPN, as mentioned (required)
-
Privoxy (required)
-
Squid (optional)
-
Snort (optional; never used this before, but something I would like to experiment with)
-
?? – again, some room for growth would be nice. Don't want to find that I need new hardware if I end up needing/wanting some additional functionality.
-
Since I'm buying new equipment, I would like to stick to GigE
-
Network topology is undecided at this point, depends in part on what hardware I choose for the PFSense box.
-
Currently, ISP -> Modem -> Router -> Clients. All clients connect to the router
-
I would be okay with solutions where all clients connect to wireless AP or PFSense box directly, or use a switch behind the PFSense box.
My first inclination was the APU1C. I know some folks with the older ALIX and they are generally happy with it. I like that it is small, fanless, and low-power (supposedly 6-12 W). Downsides are that there are only 3 LAN ports (meaning I will need a switch), no HWRNG and AES-NI, and I'm unsure how it will handle Snort or other packages I may decide to add. I also have some concerns about the thermal management.
I've also been looking at the Intel NUC a bit, or Atom options. Generally more expensive, but generally more powerful and often significantly so, and would allow some expansion for LAN connections – may avoid needing a switch. But I don't know if I believe some of the power consumption figures I've seen (in the sub 15 W range, they do come with 60-65 W power bricks after all), have fans, and sometimes things I don't need (like wireless).
I don't require a fanless option, but it will be in a living room so the quieter the better, and I like the idea of there being fewer things that can break mechanically.
So, does anyone have any suggestions/advice, or are in a similar boat as me? I'm open to new suggestions as well. But keep in mind, in my current situation, this will be in a living room - acoustics are a concern, and no racks to mount on. Let me know if any more information is needed.
Thanks!
-
-
Greetings,
First time poster, long time lurker… Im in a similar situation with my home network. My old p4 laptop is begining to show its age with misc hardware issues and Ive been searching to replace it.. The most interesting ive come across here on the forum is the cheap cheap fanless chinabox that has popped up a few times.. (http://www.aliexpress.com/item/2014-NEW-Intel-Celeron-C1037U-aluminum-fanless-dual-core-living-room-HTPC-4G-RAM-32GB-SSD/1874152277.html)
Its fanless (+)
Its cheap (+)
Its has dual lan GigE (+)
They are realtek (-)
It has 4GB ram, 32GB SSD (+) (customizable)
It has wifi (+) (Customizable)
Not sure if wifi card supports hostap (-)
Super low power consumption (+)
From China (---)It seems like a win win until you have to deal with ordering from overseas which some people seem to have an issue with.. If you are adventurous, I'd say its worth a shot.. It should have enough available horsepower to run everything you need at the speeds you are likely to use. I for one think that the overseas purchase can be overlooked if performance and quality aren't sacrificed too badly..
James
-
I'm also thinging about to have it, and trying to find who can bring one for me from China. I'm curiously is there any agent for North American?
-
What kind of budget are you looking at?
-
aliexpress will ship to wherever you are.. usually about 35bux.
-
Wow I shop at aliexpress all the time, but never knew how to find something like that, thanks!
Unfortunately I want to include dual WAN in my pfsense setup and that would not work for me because it is not NIC upgradeable.
-
Greetings,
First time poster, long time lurker… Im in a similar situation with my home network. My old p4 laptop is begining to show its age with misc hardware issues and Ive been searching to replace it.. The most interesting ive come across here on the forum is the cheap cheap fanless chinabox that has popped up a few times.. (http://www.aliexpress.com/item/2014-NEW-Intel-Celeron-C1037U-aluminum-fanless-dual-core-living-room-HTPC-4G-RAM-32GB-SSD/1874152277.html)
Its fanless (+)
Its cheap (+)
Its has dual lan GigE (+)
They are realtek (-)
It has 4GB ram, 32GB SSD (+) (customizable)
It has wifi (+) (Customizable)
Not sure if wifi card supports hostap (-)
Super low power consumption (+)
From China (---)It seems like a win win until you have to deal with ordering from overseas which some people seem to have an issue with.. If you are adventurous, I'd say its worth a shot.. It should have enough available horsepower to run everything you need at the speeds you are likely to use. I for one think that the overseas purchase can be overlooked if performance and quality aren't sacrificed too badly..
James
I'm in the same boat. Thanks for posting this.
My old dell is using about 60W and generates heat. Did anyone tried to install pfSense on this type? It would really suck if I wouldn't be able to install.
other option I was looking at was one of what it seems like supported ones http://store.netgate.com/kit-APU1C.aspx
But I'm afraid that when I get 105/20 internet it won't be able to handle that due to 100MBit ports -
Shuttle DS437 Fanless Slim PC Barebone With Inbuilt Intel Celeron Processor 1037U
http://www.newegg.com/Product/Product.aspx?Item=N82E16856101152If you want New, and plenty of power to run power hungry packages for your home network….. This is about the best deal your going to find for a dual Nic Pfsense Box.
Warranty Included 8)
Keep in mind though, you don't have to have a dual Nic interfaces to run a Pfsense firewall.
-
Shuttle DS437 Fanless Slim PC Barebone With Inbuilt Intel Celeron Processor 1037U
http://www.newegg.com/Product/Product.aspx?Item=N82E16856101152
If you want New, and plenty of power to run power hungry packages for your home network….. This is about the best deal your going to find for a dual Nic Pfsense Box.
Warranty Included 8)
Keep in mind though, you don't have to have a dual Nic interfaces to run a Pfsense firewall.
I like the fact that memory is expandable and total of 3 PCIe 2.0 slots.
It sucks that it uses 60W power supply. Power consumption will be around that mark if power hungry packages are installed.
I tired to search the forums but nothing came up. Just wanted to see if others had any luck with it. -
Shuttle DS47 running pfsense
https://www.youtube.com/watch?v=Eo4-xUMP6y4Shuttle DS437 is a hardware update basically…. From what I understand Pfsense 2.2 has support for the Realtek 8111G which is on-board the DS437.
The Shuttle DS47 I believe the guy had to compile a driver for the on-board nics.
Maybe someone here in the forum which know more about the Shuttles can help inform you more about the details of the install.
As for power consumption I would not think it would be over 17 - 18 watts at full load...
A 60 watt power supply would have about a 25% to 30% load on the power supply which sounds appropriate for 24/7 operation.
-
Thanks a lot Clear-pixel, this is exactly what I was looking for to build my pfsense box!
-
The hardware in my sig handles all that you require easily (and some more: radius, traffic shaping, dual WAN failover, etc). So something similar (my board is no longer for sale it seems) might be useful to you as well :D
-
Why is that on newegg pictures of Shuttle DS437 I can't see dual gigabit ports? but gigabit its listed under specs?
-
Why is that on newegg pictures of Shuttle DS437 I can't see dual gigabit ports? but gigabit its listed under specs?
If it's gigabit or not I can't tell from the pictures but there's definately (although dark) picture of the side with dual RJ45s if you click further to look on all of them. For confirmation, try this page instead.
-
Alright guys you finally convinced me :D
Just ordered from Best Buy Marketplace http://www.bestbuy.com/site/shuttle-digital-signage-appliance/1311090179.p?id=mp1311090179&skuId=1311090179&st=DS437&cp=1&lp=2#overview-tab for $209.32 w/ free shipping. I have their card so I choose 6-Month Financing - No interest.
Will post back if I get it to work.Edit: Finally got Shuttle DS437. Nics were not recognized so I had to install 2.2-ALPHA and everything works with 16W power consumption.
-
Just realized that it does not come with HD or memory :o
With pfSense it does not make sense to buy SSD HD because everything is handled in memory, correct?
Will 2GB of memory be enough or I should go for 4GB? -
other option I was looking at was one of what it seems like supported ones http://store.netgate.com/kit-APU1C.aspx
But I'm afraid that when I get 105/20 internet it won't be able to handle that due to 100MBit portsThe APU has Gigabit Ethernet (Realtek RTL8111E) ports. You might be thinking about it's predecessor, the ALIX board.
-
other option I was looking at was one of what it seems like supported ones http://store.netgate.com/kit-APU1C.aspx
But I'm afraid that when I get 105/20 internet it won't be able to handle that due to 100MBit portsThe APU has Gigabit Ethernet (Realtek RTL8111E) ports. You might be thinking about it's predecessor, the ALIX board.
Thanks for the reply but I ordered Shuttle DS437.
-
My local computer shop has something interesting.. I might forego the chinabox and setup a machine based off this lil gem.. It will end up being more expensive, but its local..
http://www.memoryexpress.com/Products/MX51909 (GA-C1037UN w/ Celeron 1037U, DDR3 1600, 7.1 Audio, Dual Gb LAN 99.99)
-
My local computer shop has something interesting.. I might forego the chinabox and setup a machine based off this lil gem.. It will end up being more expensive, but its local..
http://www.memoryexpress.com/Products/MX51909 (GA-C1037UN w/ Celeron 1037U, DDR3 1600, 7.1 Audio, Dual Gb LAN 99.99)
Looks interesting. Could not find anything as far as numbers for power consumption.
My DS437 will also end up being little more then what I wanted to spend but it will have less heat, noise and power consumption then my current Dell machine.
Just need some advice on Hard Drive and Memory.
