Experiences with the Minnowboard Turbot?
-
Does anyone have any experience with the first batch of Minnowboard Turbots [1]?
I'm wondering how it compares to the RCC-DFF 2220 / SG-2220, not necessarily as a firewall, but as a general purpose low-power x86_64 computer that is supported by Coreboot. But if you have tested it as a firewall, I'd be interested in your experiences as well.
[1] http://store.netgate.com/Turbot.aspx
-
I haven't even seen one yet. We may have one around the office somewhere but they're not generally available yet. First batch currently expected in November.
Generally not a good firewall option given only one NIC, and the fact USB NICs aren't good for any serious usage, and router on a stick isn't a good solution for most. But should be a great general purpose low power computer.
-
I'm wondering how it compares to the RCC-DFF 2220 / SG-2220, not necessarily as a firewall,
As a firewall I would not recommend to use it. And the SG-2220 should be from the tech. specs. side more
powerful and use able as this Turbot.but as a general purpose low-power x86_64 computer that is supported by Coreboot.
- Linux & Asterisk PBX
- Linux & 2nd Radius Server
- Linux & CACTI + MRTG
- LINUX & syslog-ng server
- Linux & small snort sensor
- Linux & WireShark, TCPDUMP,….. Network helper appliance
There fore it would be great and a real deal to get some more as a ARM based PI to inspect or collect data
from your network or hunting for problems within inside of the network. -
^^^^^^^ This.
-
@cmb:
Generally not a good firewall option given only one NIC, and the fact USB NICs aren't good for any serious usage
Are you saying that the NIC is on the USB bus? Or do you just mean that it would not be worth it to add a second USB NIC?
-
@cmb:
Generally not a good firewall option given only one NIC, and the fact USB NICs aren't good for any serious usage
Are you saying that the NIC is on the USB bus? Or do you just mean that it would not be worth it to add a second USB NIC?
No the onboard NIC is fine, just that you usually need two NICs for firewall purposes, and USB is your only option for a second (and not a good one).
-
It's not the only option. One could build a lure with minipcie to Ethernet.
I've mulled over building a switch lure with 1Gbps Ethernet into the switch and a second 1Gbps Ethernet on the outside.
-
If you don't mind a frankenbuild, there are single port 82574L and dual port i350 mini-pcie cards out there
-
@jwt:
It's not the only option. One could build a lure with minipcie to Ethernet.
I've mulled over building a switch lure with 1Gbps Ethernet into the switch and a second 1Gbps Ethernet on the outside.
Would there be an advantage over the RCC-DFF-2220?
-
Not my answer but I will chime in to help.
Size
NanoITX versus picoITX
-
http://imgur.com/gallery/hnvhp/new
-
Hi All,
I'm considering to buy a Turbot for FW usage.
http://store.netgate.com/Turbot.aspx
I've checked this site and as I see it is possible to add the following LURE board:
http://store.netgate.com/Silverjaw-Lure-for-MinnowBoard-Max-with-mSATA-and-mPCIe-P2433.aspxThis way if I'm correct I can connect a PCIe GBe NIC.
Is there someone here who's using the same scheme? Is it a working solution?
I believe that the CPU power should be enough for home routing and the AES-NI helps because I want to create a site-to-site IPSEC between this and another pfSense (Running virtualized on Hyper-V and Core i5).Also considered to buy Banana Pi Router and OpenWRT but I prefer to go with pfSense and I'm afraid the the banana is not powerful enough for routing.
-
I'm considering to buy a Turbot for FW usage.
http://store.netgate.com/Turbot.aspx
Again, for a little network helper appliance it would be a great and I personally would point it over
all PI PCs, but for a firewall I really thing it is the worse way to start with.I've checked this site and as I see it is possible to add the following LURE board:
http://store.netgate.com/Silverjaw-Lure-for-MinnowBoard-Max-with-mSATA-and-mPCIe-P2433.aspxTo build a WLAN AP, a smaller Captive Portal only, to add it to an existing network, perhaps, but not for more.
This way if I'm correct I can connect a PCIe GBe NIC.
If there will be a daughter board that offers LAN Ports it would be a way to get more LAN Ports on
the Turbot, but this is a "special" plug and so no ordinary PCIe cards will fit in.Is there someone here who's using the same scheme? Is it a working solution?
I believe that the CPU power should be enough for home routing and the AES-NI helps because I want to create a site-to-site IPSEC between this and another pfSense (Running virtualized on Hyper-V and Core i5).And why not taking the chance to get the hands on a SG-2220 that is produced for exactly that scenario to
go with?Also considered to buy Banana Pi Router and OpenWRT but I prefer to go with pfSense and I'm afraid the the banana is not powerful enough for routing.
If you will preferring to go cheap go with OpenWRT, or buy your Turbot and write a review for us about your
concerns and made experiences. Again if you want to build a proper firewall, it should be coming with a min.
of 2 LAN Ports, and if you are go and try out to connect only WLAN devices to that or over that devices it
should be enough to own one LAN Port. -
And why not taking the chance to get the hands on a SG-2220 that is produced for exactly that scenario to
go with?I don't think it worth the price.
I mean I just checked out and it is cheaper to build your own:
For CPU and Motherboard i will use: Gigabyte GA-N3050N-D3H
This is a newer HW and more powerful than SG-2220. Supporting AES-NI and benchmark results are higher. It has 2 GB NIC.For RAM memory I will go: Kingston 4GB 1600MHz DDR3L
Doubled the memory (I know 2 gigs is enough but the price is only a bit higher)For case & PSU I will buy: LC POWER Power mITX - 1340MI - 75W Adapter
Small and cheap case and 75W is way too much for this build.For storage I'll get a Noname 1,8" 8 Gigs SATA III SSD from AliExpress.
The sum price for this converted from Hungarian Forints to USD:
153$ - half price.Differences are (SG-2220 - My build):
Intel NIC - RTL NIC (I'm using this RTL on my other home server for 5 years now under pfSense. I had no problem with speed and stabillity. The speed was always very close to the HW max.)
120 x 120 size - 220 x 200 size (My build is bigger but It doesn't matter in my case. If I need I can add two 40mm fans to compensate the heat. I will see if it is needed)Anyway thanks for the tip with SG-2220, helped a lot to find the necessary and cheaper hardware solution.
-
Intel NIC - RTL NIC (I'm using this RTL on my other home server for 5 years now under pfSense. I had no problem with speed and stabillity. The speed was always very close to the HW max.)
You're the only one who likes Realtek NICs.