I'm working on picking out hardware for a very small (ITX or Mini PC) OPNSense system that will also run Zenarmor for a 3-10Gb/s fiber connection with a few dozen devices.
Right now I have a X710 as my NIC, and I'm between several different build options with estimated build costs:
Minisforum 7945HX Motherboard + 32GB + 2x256GB = $545
Minisforum MS-01 12900H + 32GB + 2x256GB = $520
Minisforum MS-01 12600H + 32GB + 2x256GB = $425
Embedded Motherboard 7940HS + 32GB + 2x256GB = $460
Embedded Motherboard 7840HS + 32GB + 2x256GB = $435
Embedded Motherboard 6900HX + 32GB + 2x256GB = $408
Am I way off track with these builds? Way overkill for what I need? I'm also open to other ideas that people have, the end goal is to try and keep this whole thing under $500 if possible.
That seems reasonable. I'd go for the MS-01.
I doubt you will achieve 10G IDS/IPS with anything in that price range.
Compare: https://shop.opnsense.com/dec800-series-opnsense-desktop-security-appliance/
2 G/s threat protection ...
Quote from: Patrick M. Hausen on March 24, 2025, 09:21:05 AMI doubt you will achieve 10G IDS/IPS with anything in that price range.
Interestingly, the DEC4280 which got an AMD EPYC 3451 cpu, according to Youtube: Our BIG network upgrade! - OPNsense DEC4280 (https://www.youtube.com/watch?v=QvtIVuG0-XQ), can do 7.5Gbps IDS. The CPU score is around 20'000, quite a bit less than the CPUs listed in OT's first post. Not sure about the PCIe lanes compared to OT's choices, or the network interfaces in use on the DEC4280.
The datasheet says 2 Gbps IDS? Puzzled ...
Quote from: sparton175 on March 23, 2025, 11:41:48 PM[...]
Right now I have a X710 as my NIC [...]
Some of those options seem to have built-in x710s, and no slots...
I have to agree that several of the big Alder Lake and Zen 4 CPUs listed should outperform the old embedded Zen 1 (DEC4280). Can't comment on content filtering performance, though.