Hi there
Currently using untangle free version on an old i3 maching. I want to move to OPNsense and looking for something inexpensive. I'm from South Africa so can order from local and amazon.com so no ebay or aliexpress please.
We will be running either suricata, zenarmor (free version) or both so what do you guys suggest. I will also be doing ssl inspection. We don't have many workstations only about 6-7 of them but we are running vlans for cameras, phones, workstations, servers (about 4 servers), IoT. I also want to do SSL inspection and dns filtering using unbound and also ip address list I will add to the firewall. So can anyone suggest me a pc with dual intel lan cards.
Internet is 300mbps down and 150mbps upload might be faster in the near future to like 1Gbps or faster. I want to go as cheap as possible.
I don't mind if it's not fanless. I'm doing router on a stick as it's easier to manage with the switches I have and so far working great
I run a Beelink ME mini as a small NAS and I am very satisfied with the unit.
They have a variety of models, something like the EQ14 N150 (https://www.bee-link.com/products/beelink-eq14-n150?variant=47996790636786) might fit your requirements. If you pick the 2x 2.5 Gbit/s model you get Intel based network interfaces, 16 GB of memory, 500 GB of SSD - at 229 USD total.
HTH,
Patrick
Quote from: Patrick M. Hausen on October 06, 2025, 10:39:07 AMI run a Beelink ME mini as a small NAS and I am very satisfied with the unit.
They have a variety of models, something like the EQ14 N150 (https://www.bee-link.com/products/beelink-eq14-n150?variant=47996790636786) might fit your requirements. If you pick the 2x 2.5 Gbit/s model you get Intel based network interfaces, 16 GB of memory, 500 GB of SSD - at 229 USD total.
HTH,
Patrick
thanks for the reply. will that n150 be enough for what I want to do? if a n150 is good enough for my usage case then I might as well get this. The pc will be in a server room with aircon on all the time
https://www.amazon.com/Upgraded-Desktop-Computers-Display-Business/dp/B0F388KC4V/ref=sr_1_4?crid=2QZVPDKF2W7JD¤cy=ZAR&dib=eyJ2IjoiMSJ9.kM0-HFz3da4A-AiVP-ifX_YjeKLHnrCTDGNWSZKUtk7nO7r9gQH-m7POx3kTmgJLUWZWYh8TNBF4jJ2QuhZ2yogO5bR5nS0c4urcqalPde5Xln8BGutEX8Fa1IWNdNJKD1ArYPAB0wgXhu-evtaITRCHNkD-uh_i1YSpiL7TUHzHyNQA1uO0s3OHN0HMLEAVadmQzWurlWpfSnl8FgrH0o1w1tRwcCK28B6HOAaRbKs.nMxZpTr5tu_eakgqF0pnaERWkAsPdi_HX8bJtTvY33U&dib_tag=se&keywords=dual%2Bintel%2Bnic%2Bmini%2Bpc&qid=1759734420&sprefix=dual%2Bintel%2Bnic%2Bmini%2Bpc%2Caps%2C346&sr=8-4&xpid=LpuPV63pDiKEg&th=1
The twin lake mini pc listed is ok, but the RAM is soldered onto mobo, fixed at 12GB.
Just make sure you flash the i226 nvram.
I was unable to find a beelink with intel NIC's at 2.5g. They recommended a SER5 but when I got it, it had only one NIC. The latest they suggested was a pretty pricy GTi12 but I haven't been able to confirm which brand NIC's they have (I asked them but each Q&A takes overnight).
If this is a business, and you have a network closet or somewhere that size and noise is not so much an issue, older desktops with PC bus will give you a lot of performance and you can easily buy an Intel dual NIC for it. Mostly as a test I'm running a 2016 vintage desktop with new dual 10g NIC's and it works great. But I've been looking at a bunch of brands for at least dual 2.5 Intel and few of the low price ones have that except ones with N100 or N150, which I do not want to bet on since I may start running various analysis programs that may eat up those slow processors even if they work great for just plain firewall rules.
I specifically linked to one with 2x 2.5G Intel in my post (https://forum.opnsense.org/index.php?topic=49181.msg249062#msg249062).
Quote from: Linwood on October 06, 2025, 09:43:22 PMa 2016 vintage desktop with new dual 10g NIC's and it works great.
Many of the 10G nics have issues linking at some speeds. Intel seems to have issue with 2.5 and 5Gb speeds.
And then you have 10G what for layer-1? Copper or fiber?
I think the ask was to achieve 2.5Gb, usually gonna be copper.
Quote from: Patrick M. Hausen on October 06, 2025, 09:50:18 PMI specifically linked to one with 2x 2.5G Intel in my post (https://forum.opnsense.org/index.php?topic=49181.msg249062#msg249062).
I wonder is country origin is the issue for buying it? The Beelink site also shows it as Sold Out for any country selected.
Quote from: Patrick M. Hausen on October 06, 2025, 09:50:18 PMI specifically linked to one with 2x 2.5G Intel in my post (https://forum.opnsense.org/index.php?topic=49181.msg249062#msg249062).
Yes, as I mentioned "except ones with N100 or N150". There are a lot available with slower processors, which are perfectly adequate for basic firewall functions. As well as some fancy ones like Protectli that are more costly but quite nice.
What's nice is some in that space have SFP+ slots, which if you are trying to do multi-gig and can use DAC to a switch, saves power and heat. The closest I've found to that with faster CPU's is the MS-01 from minis forum.
Quote from: BrandyWine on October 06, 2025, 10:19:44 PMMany of the 10G nics have issues linking at some speeds. Intel seems to have issue with 2.5 and 5Gb speeds.
And then you have 10G what for layer-1? Copper or fiber?
I think the ask was to achieve 2.5Gb, usually gonna be copper.
Sorry, I wasn't saying the OP should get 10g, just making a comment as example that older PC's with newer NIC's can be a good option if space/sound/power is not an issue. Nice 2.5g Intel NIC card in a several year old PC could make a nice cheap firewall with better performance than some of the mini's in the cheap price ranges being discussed.
Beelink i3 16/500, for this price, if all you need is two 1Gb rj45 ports and possibly an add-on usb3 wifi, wow.
Product B0F3X91S2L on amzon
2.5Gb N150 version B0C339KVH9
If 1G is good enough, that i3 is very good.
Weird that they match N150 with i226v 2.5G, and i3 with only 1Gb nics. And i3 with i226v nics would be ideal.
yeah, if 1g works, this is the one I use: Beelink Mini PC EQi12, Intel Core 1220P
It uses realtek NIC's, and does NOT require the plugin (in fact it stopped working with the plugin, oddly). But it is realtek 9as I think most of theirs are, but it's really hard to find out on their website. That's $300 with 16gb/500gb in the US on Amazon not on sale (yet, may be momentarily since it's prime days).
**** Update next day **** This box does need the plugin, but will not work with it unless you ensure the offload settings are disabled (Interfaces, General, top three options). They are disabled by default but I had enabled. With enabled the plugin itself hung one interface, but under stress they also hung. With the plugin and offloading disabled the box seems more stable under load, but I would still not buy Realtek for Opnsense if I had to do it again. *****
yes I would prefer not to have any realtek NIC as I tried before and to many issues when using it on the wan side
Quote from: DiceAir on October 07, 2025, 10:40:05 AMyes I would prefer not to have any realtek NIC as I tried before and to many issues when using it on the wan side
Does the EQi12 use realtek nic?
The little n150 (not a bee) I got seems to be doing just fine for me, 3 226's and 2 x520's.
QuoteDoes the EQi12 use realtek nic?
Yes. per Beelink support some GTi's have intel:
QuoteTo clarify regarding our GTi series:
GTi12 / GTi13 / GTi14 – Equipped with Intel I226-V 2.5G LAN
GTi15 – Equipped with Intel E610 10G LAN
The e610 is not yet supported natively in FreeBSD, but there's workaround for that.
If 2.5G and ability for 10G (x520) is good, then there's plenty of those available. I got the bare bones version and installed 16GB ram and 256GB ssd of my choosing. Works really good for me, little box handles my 1.2Gb ISP pretty good.
Thanks for all the info so far so here is maybe a plan.
My office PC is an i5-12400 with 32 GB DDR4 3200 MHz on a Gigabyte B660 D3H, which already has an Intel i226-V NIC. So all I really need is to add another Intel-based network card and I'm sorted for OPNsense.
In short, I'll upgrade my own PC — maybe to an i5-14400 or even a mini-PC — since I don't have to worry about Intel NIC compatibility there. The OPNsense box needs Intel NICs because they just work best, especially on the WAN side.
Using my 12400 for OPNsense should give me great performance for everything I plan to run, and adding another i226-V or similar Intel NIC will be more than enough.
I'm mainly looking at upgrading my workstation because I need a better iGPU than what the 12400 offers for other tasks.
So if someone can maybe give me an amazon link to a really cheap intel lan card even if it's a single port i226-v. I heard there's so many fake cards out there.
Quote from: DiceAir on October 08, 2025, 08:59:29 AM[...]
Using my 12400 for OPNsense should give me great performance for everything I plan to run, and adding another i226-V or similar Intel NIC will be more than enough. [...]
What are you plugging into? LAN and WAN. There are lots of NIC options - I tend to think of UTP by default, but SFP+ with DAC cables can be pretty cheap and relatively low power (though not as low as the i226). I'm not familiar with the market where you are, but there may be some decent options on Amazon.
I'm going rj45 no SFP, SFP+ or so on yet and not for a long time
The only i226 I'm certain of on Amazon would be labeled "Intel® Ethernet Network Adapter I226-T1". UPC should be 735858517027. It, or an OEM, can usually be distinguished by the diagonal orientation of the i226, along with a dual-row header at the top of the board (8 pins populated on the photos I've seen).
QNAP makes Intel-based cards, but all they make at the moment are i225s: QNAP QXG-2G1T-I225 and QXG-2G2T-I225. I have the single port card - it's well made, v3 chip, and uses the Intel drivers. I can't say about the NVM updater, as I haven't attempted to update it or looked at the files.
LR-LINK/Linkreal cards are pretty good - well-made OEMs. I've never used their Intel-based cards, though. The LRES2031PT is an i225; the LRES1059PT is an i226.
Other folks here likely have better pointers. The i226 is the more desirable device, as the i225 uses more power and the v1 and v2 revs were junk.
Quote from: pfry on October 08, 2025, 09:58:27 PMThe i226 is the more desirable device, as the i225 uses more power and the v1 and v2 revs were junk.
From online info, I thought i225 was rebranded as "new" i226 just because of all the issues 225's were having. IIRC, the latest 226's are rev(4) (need verification). Not clear to me if 226 "rev(4)" was just a continuation from the 225 "rev(3)", 226 is mostly a 225 with some changes. Even Intel plays the game with names and numbers.
Quote from: BrandyWine on October 11, 2025, 01:06:42 AMFrom online info, I thought i225 was rebranded as "new" i226 just because of all the issues 225's were having. IIRC, the latest 226's are rev(4) (need verification). Not clear to me if 226 "rev(4)" was just a continuation from the 225 "rev(3)", 226 is mostly a 225 with some changes. Even Intel plays the game with names and numbers.
True. I was just going by the power figures from the i225-T1 (https://cdrdv2-public.intel.com/639476/Intel%20Ethernet%20Network%20Adapter%20I225-T1.pdf) and i226-T1 (https://cdrdv2.intel.com/v1/dl/getContent/765669) product briefs. They are pretty close to identical.
I would not call a difference of 1 Watt (i.e. 2.39 Watt vs. 1.4 Watt at 2.5 Gbps) "pretty close to identical".
Quote from: meyergru on October 11, 2025, 09:47:13 AMI would not call a difference of 1 Watt (i.e. 2.39 Watt vs. 1.4 Watt at 2.5 Gbps) "pretty close to identical".
At 1Gb the watts might be about the same?, but since 226 can do more, more power perhaps?
Maybe being competitive these days should be more like "
we do all these features under 2W of power".
Quote from: meyergru on October 11, 2025, 09:47:13 AMI would not call a difference of 1 Watt (i.e. 2.39 Watt vs. 1.4 Watt at 2.5 Gbps) "pretty close to identical".
Heh. I was referring to the briefs. But I have to wonder at the difference - that's some significant badness in the i225.
Then again, Marvell went from 2.5W for the 88x3110 (100M/1G/10G) to 3.5W for the 88x3310 (100M/1G/2.5G/5G/10G), seemingly because they slapped on an entirely separate transceiver for 2.5G/5G. Don't ask me why.
I'd say Realtek has 'em beat, at 700mW for 2.5Gb. But likely not by as much as the numbers would indicate, as Intel power figures tend to be pretty pessimistic.