Netgate RCC-VE 2440 or Netgate APU4?



  • since BSD upgraded and thus i can't upgrade my FW-525B i want to purchase a new one.

    either the Netgate RCC-VE 2440 or Netgate APU4.

    Netgate RCC-VE 2440:  353.00
    Netgate APU4:              319.00

    extra mem for RCC-VE 2440 is 125.00 for 128gb
    extra mem for APU4 is              69.0 for 30gb
    RCC-VE has 4GB ports
    APU4 has    3GB ports

    it's for a home use where 3 eth ports have sufficed with the old FW-525B but having an extra on i might be able to utilize.

    anyone know a compelling reason for one over the other?



  • There's a big difference between the two in CPU and in NICs. The 2440 has a C2558 CPU which has AES-NI and is otherwise significantly more powerful than the AMD T40 in the APU. The 2440 has Intel NICs rather than Realtek, which is significant for performance reasons and possibly functionality reasons depending on what you're plugging into (for instance forcing speed and duplex is broken in hardware on the APU, though that's very rarely necessary and never should be for home purposes).

    I'd definitely recommend the RCC-VE over the APU in any circumstance. Better quality hardware, faster, more scalable.



  • Hello,

    it's for a home use where 3 eth ports have sufficed with the old FW-525B but having an extra on i might be able to utilize.

    If you have the money, spend the ~$30 more on top to get your fingers on the RCC-VE 2440!

    anyone know a compelling reason for one over the other?

    Intel GB LAN Ports
    Intel QuickAssist
    AES-NI

    If you have 100 MBit/s or more Internet line, wnats to run an OpenVPN server, Squid +
    SquidGuard is on your road map and Snort is interesting it should be better to go with
    the RCC-VE 2440, but if only Internet and sometimes a VPN connect to your home will
    be there the Alix is also a good choice.



  • If you do not use an SSD (what you mentioned as "extra mem") then:
    a) the APU runs nanoBSD image on an SD card.

    b) RCC-VE 2440 puts a full image onto the internal eMMC flash. I have not found out if there is a way to get the nanoBSD image onto the internal eMMC flash.
    (Someone please correct this if I am wrong)

    Because nanoBSD is mounted read-only during regular operation, it is more resistant to problems with unexpected power interruption. In home use you might have less reliable power and thus be happier with the nanoBSD image, assuming you do not want to run proxy-caching-type packages that need storage for web-caching…



  • @cmb:

    There's a big difference between the two in CPU and in NICs. The 2440 has a C2558 CPU which has AES-NI and is otherwise significantly more powerful than the AMD T40 in the APU. The 2440 has Intel NICs rather than Realtek, which is significant for performance reasons and possibly functionality reasons depending on what you're plugging into (for instance forcing speed and duplex is broken in hardware on the APU, though that's very rarely necessary and never should be for home purposes).

    I'd definitely recommend the RCC-VE over the APU in any circumstance. Better quality hardware, faster, more scalable.

    thanks much for your insights and helping me out.  i'd much prefer the Intel nic's for sure. the AES-NI & more power, sure, that's a positive.

    i'll order one. ;-)



  • @BlueKobold:

    Hello,

    it's for a home use where 3 eth ports have sufficed with the old FW-525B but having an extra on i might be able to utilize.

    If you have the money, spend the ~$30 more on top to get your fingers on the RCC-VE 2440!

    anyone know a compelling reason for one over the other?

    Intel GB LAN Ports
    Intel QuickAssist
    AES-NI

    If you have 100 MBit/s or more Internet line, wnats to run an OpenVPN server, Squid +
    SquidGuard is on your road map and Snort is interesting it should be better to go with
    the RCC-VE 2440, but if only Internet and sometimes a VPN connect to your home will
    be there the Alix is also a good choice.

    yes, i have a faster Internet line and may want to experiment with Squid. i've used Snort in the past but never installed on the FW-525B. (gee that thing stays HOT)

    think i'll get the RCC-VE 2440 and the extra mem.  thanks



  • @phil.davis:

    If you do not use an SSD (what you mentioned as "extra mem") then:
    a) the APU runs nanoBSD image on an SD card.

    b) RCC-VE 2440 puts a full image onto the internal eMMC flash. I have not found out if there is a way to get the nanoBSD image onto the internal eMMC flash.
    (Someone please correct this if I am wrong)

    Because nanoBSD is mounted read-only during regular operation, it is more resistant to problems with unexpected power interruption. In home use you might have less reliable power and thus be happier with the nanoBSD image, assuming you do not want to run proxy-caching-type packages that need storage for web-caching…

    yes, that is what i meant regarding the mem, should have written SSD storage.  the FW-525B i have now has the nanoBSD on its SD card.

    we do get power outages here, more so in summer like most places that tax the grid via A/C increase. but i have UPS's that shutdown the systems here at home.

    i see pfsense sells their version of 2440 with pfsense installed though a bit more expensive. does it have CentOS installed on these or freeBSD?

    if i went with netgate's 2440, installing pfsense is rather easy, yes? or do i need to put a diff OS than the CentOS that comes with it?

    for extra storage for experimenting with Snort and Squid will 30GB SSD be sufficient versus the 128GB SSD?  its for home use and not many users at home.

    appreciate your comments and help.



  • we do get power outages here, more so in summer like most places that tax the grid via A/C increase. but i have UPS's that shutdown the systems here at home.

    It is a must be if you go by SSD or mSATA. Perhaps a SATA_DOM.

    i see pfsense sells their version of 2440 with pfsense installed though a bit more expensive. does it have CentOS installed on these or freeBSD?

    Netgate RCC-VE 2440 System = CentOS 7.1
    SG-2440 PFSENSE® SECURITY GATEWAY APPLIANCE = pfSense + 1 year Support

    if i went with netgate's 2440, installing pfsense is rather easy, yes? or do i need to put a diff OS than the CentOS that comes with it?

    This should be answered by a pfSense staff member related, because these appliances are to new.



  • Netgate RCC-VE 2440 System = CentOS 7.1
    SG-2440 PFSENSE® SECURITY GATEWAY APPLIANCE = pfSense + 1 year Support

    I believe that even if you do get pfSense running on the RCC-VE 2440 from Netgate, you do not gain the Intel QuickAssist technology - I could be mistaken as this seems to be a bit of a vague/grey area but I think that driver does not exist in the community version of the firmware (?) and you only get it if you buy your appliance from the pfSense Store. Hope I am wrong but … ?  ???



  • @luckman212:

    Netgate RCC-VE 2440 System = CentOS 7.1
    SG-2440 PFSENSE® SECURITY GATEWAY APPLIANCE = pfSense + 1 year Support

    I believe that even if you do get pfSense running on the RCC-VE 2440 from Netgate, you do not gain the Intel QuickAssist technology - I could be mistaken as this seems to be a bit of a vague/grey area but I think that driver does not exist in the community version of the firmware (?) and you only get it if you buy your appliance from the pfSense Store. Hope I am wrong but … ?  ???

    i see. not sure if netgate installs pfsense on the rcc-ve-2440. their webpage states if one wants that then to goto pfsense and buy their appliance and support. i certainly could have read that incorrectly though. i know for the APUr unit it will come with pfsense installed.

    there is a cost diff for my personal funds but supporting pfsense is a good thing to do too. it is a top notch firewall.  i'll check with netgate this week and get low down on if they actually install pfsense on these new rcc-ve-2440.

    interesting point about the Intel QA tech. not even sure i would even need that as this is for home use, more insurance is probably a good thing.



  • @BlueKobold:

    we do get power outages here, more so in summer like most places that tax the grid via A/C increase. but i have UPS's that shutdown the systems here at home.

    It is a must be if you go by SSD or mSATA. Perhaps a SATA_DOM.

    i see pfsense sells their version of 2440 with pfsense installed though a bit more expensive. does it have CentOS installed on these or freeBSD?

    Netgate RCC-VE 2440 System = CentOS 7.1
    SG-2440 PFSENSE® SECURITY GATEWAY APPLIANCE = pfSense + 1 year Support

    if i went with netgate's 2440, installing pfsense is rather easy, yes? or do i need to put a diff OS than the CentOS that comes with it?

    This should be answered by a pfSense staff member related, because these appliances are to new.

    cheers, appreciate your help and insights



  • @BlueKobold:

    we do get power outages here, more so in summer like most places that tax the grid via A/C increase. but i have UPS's that shutdown the systems here at home.

    It is a must be if you go by SSD or mSATA. Perhaps a SATA_DOM.

    i see pfsense sells their version of 2440 with pfsense installed though a bit more expensive. does it have CentOS installed on these or freeBSD?

    Netgate RCC-VE 2440 System = CentOS 7.1
    SG-2440 PFSENSE® SECURITY GATEWAY APPLIANCE = pfSense + 1 year Support

    if i went with netgate's 2440, installing pfsense is rather easy, yes? or do i need to put a diff OS than the CentOS that comes with it?

    This should be answered by a pfSense staff member related, because these appliances are to new.

    i see the concerns & issues that you brought up at this link:
    https://forum.pfsense.org/index.php?topic=91870.0

    i too find it a bit odd that the eMMC isn't used for the OS and a SSD for say snort, squid, backups, etc?  but this is CentOS and not nanoBSD, ?, and maybe that makes a difference.

    but for home use, i don't want to have to be reconfiguring after every upgrade either. not sure i even have the skills for that these days.  it won't stop me from buying the unit, just seems kinda odd about the eMMC not being used at all while i'm contemplating the extra storage option of 30GB or 128GB.



  • I believe that even if you do get pfSense running on the RCC-VE 2440 from Netgate, you do not gain the Intel QuickAssist technology - I could be mistaken as this seems to be a bit of a vague/grey area but I think that driver does not exist in the community version of the firmware (?) and you only get it if you buy your appliance from the pfSense Store. Hope I am wrong but … ?  ???

    FreeBSD is not Linux, but if there is a new Linux kernel set, to support and use the Intel QuickAssist
    technology, it could really be that someone must before that we all can use this writing code using the from
    Intel offered API for this new technology. So why now the question FreeBSD and also on top pfSense should
    not be profiting from that? Either by going with a brand new netgate, pfSense or a Supermicro board?

    Intel has published a new Linux kernel patch-set that adds Quick Assist Technology support to Linux along with a driver to handle their …

    i see. not sure if netgate installs pfsense on the rcc-ve-2440. their webpage states if one wants that then to goto pfsense and buy their appliance and support. i certainly could have read that incorrectly though. i know for the APUr unit it will come with pfsense installed.

    As shown on their website it will be shipped with CentOS 7.1 on the nand storage, eMMC, but if you want
    to get your box pre installed with pfSense it will be also installed on the eMMC storage! Only if you will be
    getting a mSATA extra they install it on this medium!

    there is a cost diff for my personal funds but supporting pfsense is a good thing to do too. it is a top notch firewall.  i'll check with netgate this week and get low down on if they actually install pfsense on these
    new rcc-ve-2440.

    Ok this is something each of us must decide by it selfs.

    interesting point about the Intel QA tech. not even sure i would even need that as this is for home use, more insurance is probably a good thing.

    AES-NI and intel QuickAssist would be speeding up some things like snort, suricata,
    compression and encryption. For those small Atom CPUs it would be a real benefit related to the
    faster and bigger Internet lines.

    i see the concerns & issues that you brought up at this link:
    https://forum.pfsense.org/index.php?topic=91870.0

    The same thinking fals as I see it, if someone get those appliances pre installed with CentOS or pfSense
    the entire OS will be installed on the eMMC storage, really ready to go! Only if he wants to install on another
    medium it would be installed there, so in my eyes it is not a wasted part of the unit.

    But getting the CentOS on the eMMC and then installing pfSense on the mSATA but no want to wipe
    out the CentOS and if this is causing trouble pfSense team or netgate should be wrong is in my eyes
    not a real problem of them but more of the user it selfs.

    i too find it a bit odd that the eMMC isn't used for the OS and a SSD for say snort, squid, backups, etc?  but this is CentOS and not nanoBSD, ?, and maybe that makes a difference.

    It is like the older days, but there nobody was complaining!!!! if you install pfSense on a CFCard that is
    mounted read only, you cant use squid + squidguard + av scann and snort together! You will need a
    HDD/SSD or mSATA for the caching procedure at all. And this would be also not really matching on the
    eMMC because on the read/write cycles and it is better in performance like the old CFCards, but the mSATA
    is able to be changed if failing.

    but for home use, i don't want to have to be reconfiguring after every upgrade either. not sure i even have the skills for that these days.

    Then perhaps the Alix APU platform is the right thing for you! Could this be? There you get no nand storage
    soldered on board and a SATA or mSATA is a must be.

    it won't stop me from buying the unit, just seems kinda odd about the eMMC not being used at all while i'm contemplating the extra storage option of 30GB or 128GB.

    And what would be the alternative? Without eMMC you must buy a mSATA or industrial CFCard as
    in the older days and if one is failing or burned you need also another one.


Log in to reply