Would this work well
-
Ok I finally caved and am thinking of going with a SM
X7SPA-H-D525
Kingston ValueRAM 8GB
WD Blue 320GB 2.5"8 Port switch
What PCI-E wifi card would you recommend (yes I know you can use a old router but they are all garbage now)
#extra parts (I already have)
Case
300 watt PowerI will be running Snort Squid and HPAV and minimum
-
The D525 is looking a bit old these days. What sort of bandwidth do you need?
Steve
-
The D525 is looking a bit old these days. What sort of bandwidth do you need?
Steve
The reason im looking this route is I dont think getting a alix is I need (squid, snort, HAVP) very non teksavvy users so I am always having to fix shit so trying something else
very minimalwired
3 offices computer
2 POSWireless
2 wireless printers
4 phonesSo if the VK-T40E can support (squid, Snort, HAVP, IP-Blocklist ) I am golden the cherry would be if I can add a pciemicr wifi card
-
http://www.ncix.com/detail/supermicro-motherboard-mbd-x10sba-l-o-celeron-j1900-75-101469.htm
add 8gb ram and a ssd/hd/slc cf and your good
-
The D525 will run all those services but it will do it slower than a J1900.
Since you appear to have only two internal interfaces, LAN and wifi, and you have minimal wireless devices you're unlikely to need high bandwidth between them. Thus your WAN bandwidth will be the throughput limit. What is it?
To give you some idea the D525 will manage ~500Mbps of firewall/NAT whereas the J1900 ~1Gbps. Adding packages like Squid, Snort and HAVP will reduce those numbers considerably. It's hard to give hard values since there's too many variables.Steve
-
I've got an impression that we are not talking about extreme bandwidth here? Is that right?
How fast is your internet?
-
I've got an impression that we are not talking about extreme bandwidth here? Is that right?
How fast is your internet?
The bandwidth is very minimal just looking for the cheapest low power option. Would http://store.pfsense.org/VK-T40E/ run every thing I asked of would it not keep up
-
We really can't advise you further until you tell us what the bandwidth of your WAN connection is.
The VK-T40E is not well suited to running the packages you listed because it runs from flash as standard.Steve
-
The wan connection is 20mbps and that is barley maxed out. I am going with the 4gb model and a msata 30gb
-
with only 20Mb/s on the wan, the D525 will work very well. Its nice if you can get one for a very low price?
But if the price isn't low, maybe yeah - get a newer board.
I'm not sure what prices you are getting?
I run dual core atom on a 25/5 connection and its idling.
I'd say your decision should be based on price.
-
the D525 is going for $220.00 near where I live
-
Far too expensive if thats USD.
Where do you live?
I assume you are ordering online?
Mind dropping the link here?
-
thats Canadian but the dollor almost equal So what bored would you recommend that would work with Pf 2.1
http://www.canadacomputers.com/product_info.php?cPath=506&item_id=047726
-
You pay a premium for Supermicro but they do work well.
Yes, you'll have no worries at 20Mbps with any of the options you've listed.
Whilst it's technically possible to run Snort, Squid and HAVP from a flash install it will require some tuning. Save yourself some hassle and boot from a hard drive.Steve
-
Well - The problem for you isn't the board exactly. Its the price.
The thread here has someone complaining about the D525 because he can "only" pull 600Mb/s or so through it.
https://forum.pfsense.org/index.php?topic=42853.0
So obviously, for you, bandwidth isn't the issue.
I'd simply ask people here what can you buy for $100 or so that will handle at least 20MB/s, then pick the most capable board in that list.
Also, when you say D525, are you talking about just the Motherboard, or are you talking about a complete system, in the case and ready to go?
-
You pay a premium for Supermicro but they do work well.
Yes, you'll have no worries at 20Mbps with any of the options you've listed.
Whilst it's technically possible to run Snort, Squid and HAVP from a flash install it will require some tuning. Save yourself some hassle and boot from a hard drive.Steve
So just to confirm going with the http://store.netgate.com/APU1C4.aspx with a msata will support Snort, Squid and HAVP with out any issue.
-
Storage: Boot from SD card (connected through USB), external USB or m-SATA SSD. 1 SATA data + power connector.
I wouldn't get that APU if I had other choices and space wan't an issue.
-
Yes, as far as I know you can run a full install on the mSATA in the APU and then have full access to all packages. However I don't have an APU so I advise you to read some of the relevant threads on the forum before purchase. Better, contact Netgate and ask, I'm sure they'll be able to answer any questions you have.
Steve
https://forum.pfsense.org/index.php?topic=79408.0
https://forum.pfsense.org/index.php?topic=59555
-
Something like this would work well for you, is fanless, reasonably fast, cheap, reliable, can be used with a normal SSD or HDD, is well supported by pfsense, will easily take a full install, can be hooked right up to a keyboard and monitor easily for troubleshooting when problems arise.
And its cheap…. And much more capable than that APU.
Depends how important it is to you to have a tiny case.
-
And Intel NICs vs. Realtek - No contest
-
The more obscure the better to the average person, less others will mess with it and the less it looks like a computer the better. (stuff keeps getting Royally "ugh" tired of fixing stuff)
-
Yep - Thats true. Small is nice if its your goal to keep others from seeing it.
I use a baseball bat and threats of physical harm to keep people out of mine.
But hiding it might also work.
-
Im am not there its for someone else just been asked to come up with something. and the odder the solution the better so if I can get away with the apu great but it must run those plug in if i am going that route.
