SSD for pfSense how big?

  • Hello guys I'm considering building my next pfSense box and do a Geom mirror and do squid proxy cache, since 1 120GB SSD cost $68 compared to 250GB $90 and which of those two I need two of them for the mirror,  should I go for 120GB? Since the proxy cache deletes old data every 30 days? Also For cache can I set it 75% of my ssd storage?

    Thank you!


  • Basically, as small as is reasonable. - Not sure how much cache you need for your application.

    Pfsense really only needs about 8 gig or so. Most cache activities can easily fit in 20 gig..

  • One annoying thing about GEOM is when PFSense get's shutdown unexpectedly, GEOM will spend the next hour "syncing" the drives. They're 1% full, pretty much all zeros, and it doesn't care to even check if the blocks are the same before writing over them. Pretty much knocks out an entire wear-level cycle.

  • If price is not an option, the Samsung SSD 850 EVO is the best

  • Here comes the SSD options

  • So what is the most ideal form factor of SSD to use?

    SATA, mSATA, M.2

  • sata ssd or a sata dom

    if you dont want to keep logs, a 16gb will do

    if you want to krrp logs, do a cache,etc - go 120gb+

    i would add a hd to keep the logs on

    using an old ocz 128gb ssd in my pfbox

    used a kingston v300 120gb in one i made for a friend

  • If you want permanent log, better log them remotely.
    I have an NAS at home which helps me to log them.

  • Log them remotely? That is absolutely fine I would rather do it this way.

    Not sure how would you do this on Freenas?

  • M.2 is very compact. Bit more expensive for their low end, but the middle range is competitive with SATA. SATA is easier to service if something goes wrong. FreeBSD 10.3 just got NVMe boot support. Make sure PFSense correctly boots NVMe.

  • I've run pfSense in a VM with a 4GB virtual disk image.

    It doesn't require much space.  Get the smallest disk you can find.

  • So what is the most ideal form factor of SSD to use?

    Ideally that one what is matching your hardware and/or your needs. If there is no M.2 slot, what does it
    matter that this M.2 SSDs are low power using and really fast? Or if there is only a IDE interface, then
    you better going with a IDE SSD for sure.

    SATA, mSATA, M.2

    Preventing heat, enough space, fast as it can and according the hardware capabilities there are more then
    that in the game, but often it all depends on the entire installation wise and use case, too. For a NanoBSD
    installation you are going better with the following mediums;

    • MicroDrive long life and writing cycles
    • IDE-DOM small, fast and power saving
    • SATA-DOM small, fast and power saving
    • SATA-SSD small fast and power saving + TRIM
    • USB pen drive cheap, fast, easy to backup

    And for a full installation you will better go with a;

    • M.2 NVMe or AHCI SSD fast as it can, big enough and power saving + heat prevention
    • mSATA fast, big enough and power saving + heat prevention
    • SSD cheap, fast, big enough, ~power saving + ~heat prevention
    • HDD cheap, fast and reliable, often long long time running

    So there will be in my opinion not really a way to say this is the best of all, or better then the others
    but together with a new Intel Xeon D-1500 platform it should be really power sving to go with a M.2
    SSD drive in my eyes. And yes the SG and RCC-VE units from the Netgate and pfSense store have their
    own charm, sorted with three miniPCIe + SIM slots to go with an mSATA drive.

  • Hi Frank

    I am getting a netgate 2440 and would like to know whether the onboard flash 8Gb will be enough or should I fit msata. I will be running the following in pfsense:

    DHCP server
    DNS resolver
    Firewall with port forwarding for servers/voip
    1 x VPN with servers/voip directed to normal ISP gateway
    NAT rules to assist above
    Pf blocker
    PPOE bridge to ADSL modem
    Maybe suricata (haven't decided yet)

    I only have an ADSL connection with 15Mbps down and 3Mbps up so not fast internet at all.


  • PPOE bridge to ADSL modem

    Why bridging the port to that modem? A modem is a bridged device?

    Maybe suricata (haven't decided yet)

    With Squid I would go with the mSATA, but only with IDS (Suricata) I would try out
    the eMMC storage 8 GB would be sufficient enough as I see it right.

  • Cheers Frank

    I may move the mSata drive over anyway to give me options should I need to.

    Yes, the modem is in bridge mode with the lan port connected to wan on firewall. Just my poor phrasing of how the connection is setup that caused confusion.

Log in to reply