RaspberryPi model 2 6x the power for running pfsense on
-
Tests: Just tell us how it's configured (nat, number of firewall rules, ISP specified throughput, etc) and what actual performance you see.
Will do, but wont be for a while now as other things have cropped up. :(
check out http://berryterminal.com/doku.php/berryboot its quite good and was using this on the 2gb to overcome the 3gb size of raspbian, ie boot from berry on 2gb, install raspbian on a usb memstick although dont know if the memstick will be too slow or not.
-
The new R-API is NOT 6x faster.
That's pure hype.
-
The 6 times fasters is the result of some tests carried out using multi threading benchmarking software like SysBench, its not pure hype.
The Neon enabled multicore video codecs can be over 20x faster, yet other single threaded benchmarks only show a 1.5x faster result.Whats also been interesting is seeing how raspbian (debian) has been optimised since I last played with it when the RPI model b came out, they have cut the bloat from it quite well.
Edit.
Found some networks stats for the rpi, www.hauweele.net/~gawen/blog/?p=34, suggests 94Mbps without any I/O.also found this blog where someone has freebsd running on it with a simple pf. blog.khubla.com/freebsd/simple-pf-for-raspberry-pi
Will be interesting to see how these fair with pfsense if I can get it to run.Does anyone know if trying to use the nano version of pfsense on a pi would be better or stick with the main version of pfsense?
I'm not familiar with the diffences, so although I've got some scripts together to quickly config and setup these rpi's in a variety of ways, freebsd would have to be my weakest OS, then Linux, then Windows and I'm still learning pfsense as always.
TIA.
-
Looks like it would make a pretty good small scale Asterix server or router/firewall for a slow internet connection.
-
a nice cheap and low power a squid 3 or openvpn server
there is a ddwrt distro for this unit (from the older pi, works here)
-
Using USB3 Gigabit nics will give you yet faster throughput compared to using USB2 10/100 nics.
Other tricks to speed it up include little things like switching off the a time (noatime) and dir a time (nodiratime) as the SD writes slow things up a bit. You'll get faster write speeds from a usb external hd than a SD card write, even a 100Mb/s write speed class 10 microsd card is still slow than a 7 year old usb wd external hd. -
The pi2 has usb 2.0 ports. Also i believe the sd card is hooked to the usb hardware which means that the entire filesystem/built-in ethernet/plugin drives/plugin nics are running off the same chip, which was chosen because it's cheap rather than because it's fast. So whatever the max bandwidth of that chip, that's probably the max theoretical bandwidth of all your i/o combined.
So you want to spend $50 usd or so to get a basic pi2 going, plus buy 1 ethernet nic, put everything together and try to get pfsense going on it. Or, buy a plug and play wifi router from amazon for $20?
-
Or grab a refurbished HP or Lenovo small form factor desktop from NewEgg or off ebay for around $100 and have a lot more flexibility. More power use but you can cut that back by unplugging all the hardware you don't need running.
-
There are countless really neat ideas for the pi. I use one as a stratum 1 time server and two for dns/dhcp failover pairs.
The time server is interesting, do you use it as an NTP server for pfSense and what did you add to the basic Pi to get the time sync?
It's not that interesting. We're looking at doing a GPS-disciplined clock (oscillator) as a lure for the Minnowboard Max.
-
a nice cheap and low power a squid 3 or openvpn server
there is a ddwrt distro for this unit (from the older pi, works here)
Good, Fast, Cheap: pick two.
-
Following some of the tips in another topic here on NTP and GPS I've been looking at this module, either as an add-on to a Pi or directly into my pfSense box.
https://www.adafruit.com/products/746
Not bad for $40 with a $4 antenna cable converter and a $13 external antenna.
-
That adafruit one is the one I have on my pi. Without the antenna it's nearly worthless unless you have a lot of visible sky.
I agree that a stratum 1 time server is not all that interesting. It's interesting to set up, but after that it just sits there, you check every week or 3 to make sure it's still a stratum 1 and otherwise you forget about it.
The only reason I support a pi as the time server is because I don't like all my eggs in one basket. A pi + gps is a stratum 1 time server for around $100 all in. That makes it MUCH cheaper than any other standalone time server I've seen, and AFAIC any functionality it doesn't have doesn't matter to me.
A good time source is important for my work, otherwise I wouldn't bother. It was a neat project for the pi, and now that's sitting in a pile of other pi's doing similarly trivial stuff.
I'm probably going to switch to minnowboard for some of my little stuff, but none of this will be any sort of router for me. There's lots of good router hardware out there, and purpose-built router hardware kicks ass over non-router hardware.
-
If pfsense ran on a RaspberryPi I'm sure it would get used to death by home users assuming it wasn't flakey and slow.
It will be slow. That's why we're not interested.
We have pfSense running on the BBB internally.
(If you've not noticed: http://store.netgate.com/BeagleBoneBlack.aspx)
-
@gonzopancho:
It's not that interesting. We're looking at doing a GPS-disciplined clock (oscillator) as a lure for the Minnowboard Max.
As in a Thunderbolt equivalent? A Soekris with a clock-block? (http://www.febo.com/time-freq/ntp/soekris/) Or just a GPS tacked onto a Minnowboard?
-
That's cool. :)
Steve
-
@gonzopancho:
It's not that interesting. We're looking at doing a GPS-disciplined clock (oscillator) as a lure for the Minnowboard Max.
As in a Thunderbolt equivalent? A Soekris with a clock-block? (http://www.febo.com/time-freq/ntp/soekris/) Or just a GPS tacked onto a Minnowboard?
If you really care about NTP (or ntimed https://github.com/bsdphk/Ntimed) you know that the PPS output you could get off "just a GPS tacked onto a Minnowboard (I said 'Max', but whatever) is good, but not great. What I'm describing is a GPSDO
http://tf.nist.gov/general/pdf/2297.pdfYes, a lot like a Trimble Thunderbolt. Way better than your Soekris with a Clock-block. (I've seen it all before, son.)
-
@gonzopancho:
[If you really care about NTP (or ntimed https://github.com/bsdphk/Ntimed)
[/quote]I don't: as you said, it's not that interesting. GPS / PPS units these days make it easy enough to get all the precision, accuracy & stability you need for ntpd. ntimed may change that though, as will PTP.
What I'm describing is a GPSDO
Yes, a lot like a Trimble Thunderbolt.
Great, I look forward to taking a close look and comparing them, if your design makes it to production.
Way better than your Soekris with a Clock-block. (I've seen it all before, son.)
It's not my Soekris, but it was a cool exercise to read about. I'm glad you feel you have enough experience to pull it off; it's quite hard to do well.
-
Yep, have to admire that level of hackery. :)
Steve
-
I'm glad you feel you have enough experience to pull it off; it's quite hard to do well.
One of the guys here has a father who used to work for Spectracom. Lives in-town. :-)
-
@gonzopancho:
We have pfSense running on the BBB internally.
(If you've not noticed: http://store.netgate.com/BeagleBoneBlack.aspx)That is very interesting. I've been hoping to find something like that (I'm intrigued by the ODROID) to be a travel router that can OpenVPN back to my home pfsense.
