OPNsense Forum
English Forums => Hardware and Performance => Topic started by: rickygm on May 20, 2019, 09:29:37 pm
-
Hi , I need a bit of your experience and help, I am installing a firewall opnsense with this hardware, I have about 60 users, and I need to activate, NAT, dhcp, vlan, ips and webfilter, it is possible to do it with this hardware, some recommendations based to your experience?.
any advice?
-
Hi rickygm,
I'm using a Atom D410 (2 cores @ 1.66 Ghz.) & 3 GB ram, with as much as 5 users OpenVPN, IDS/IPS & webfilter (proxy). it has never let me down.
Though, 60 users on a D525 shouldn't be a problem depending on how heavily your users use the network, but if they all need VPN and also use a lot of bandwidth, etc. this may become slow or even to much for this small beast ;)
I would say just try it if that's what you have, it may just be (more than) enough for your situation.
Greetings mark
-
While the box has 4 cores the CPU is not very potent. IDS and web proxy will push it to its limits quickly, especially if you want to do AV scanning as well and / or HTTPS interception.
Cheers,
Franco
-
While the box has 4 cores the CPU is not very potent. IDS and web proxy will push it to its limits quickly, especially if you want to do AV scanning as well and / or HTTPS interception.
Cheers,
Franco
I will not use VPN, but if I plan to activate the AV in the proxy, I think that with the IPS it could consume a lot.
-
Hi,
i also use an Atom D525 for my home network for 6 devices. I'm totally happy with it!
But the D525 isn't as quick as the Mhz will promise! Atom D525-Boxes was sold by many commercial firewall vendors for their entry level products (i.e. Sophos, Securepoint, etc.).
All of them placed their atom boxes for up to 50 Users. And that was some years ago. Of course you can give your box a try and start with it. To move the opnsense configuration later to a new hw isn't quite complicated.
best regards
Dirk
-
Ok , thank for the advice, is there any form of tuning to get a better performance?