OPNsense Forum

English Forums => Hardware and Performance => Topic started by: THB on April 19, 2017, 06:34:51 pm

Title: Hardware for 1000/1000 internet?
Post by: THB on April 19, 2017, 06:34:51 pm: Currently I've got an Asus RT-N56U router that's on it's last legs, it keeps restarting and acting up.

Anyway, this time I'm going to build myself a router instead of buying one.

I got 1000/1000 internet from my ISP so want to use it all.

I got an old Core2Duo E2140 just laying around (missing RAM and PSU) but will it work for me?

I've also been looking into the Zotac CI323 Nano, but from what I've read, people seem to have problems with it, dropping connections and such.

If I'm going to buy some new hardware I would prefer it to small and silent.

Thanks in advance.
Title: Re: Hardware for 1000/1000 internet?
Post by: shezzski on April 20, 2017, 03:59:41 am: Hi THB,

Looking at PasssMark for the Core2Duo E2140 and reading some quick forums on the Zotac CI323 Nano I really don't think you are going to get 1000/1000 with these two options.

Also are you just looking for a standard firewall or are you looking to add IPS and/or other features such as Web Proxy and VPN?
Title: Re: Hardware for 1000/1000 internet?
Post by: THB on April 20, 2017, 07:25:31 am: I'm simply looking for a "simple" firewall, maybe use snort or a similar function.
I rarely use VPN so that's not a big concern for me.

What I want/need is a box able to handle my internet speed and be rock solid.

I'm tired of consumer grade products that can't do it.
Title: Re: Hardware for 1000/1000 internet?
Post by: shezzski on April 20, 2017, 08:42:31 am: Well I would look at something with Intel NICs and a processor that is better than the Intel G3220 (average CPU PCMARK score of 3157) as quote from another forum

"Running Suricata on a Pentium G3220 (which is slower than a Core i3) and Suricata uses ~80% at 937Mbps (about the limits of my gigabit line)."

There are plenty of options, like just getting a Super Micro SuperServer or building a Shuttle barebones pc (eg DH110 with dual Intel NICs its 24/7 certified and can run in 0-50 degree Celsius temperatures).

Price/noise/power consumption are your three points that you need to trade off.
Title: Re: Hardware for 1000/1000 internet?
Post by: chemlud on April 20, 2017, 10:35:38 am: The world is full of used Dell Optiplex (SFF) with i3 or i5 Processors. Have a look, find some (small form factor = SFF) with 2 PCI slots and buy two Intel 2xGbit cards. Have a total of 5 interfaces, 4-8-16 GB RAM, and some decent CPU power. All for about 200 to 300 bugs.

Rock solid. If you need more power find a used Dell Precision workstation :-)
Title: Re: Hardware for 1000/1000 internet?
Post by: THB on April 25, 2017, 02:08:30 pm: Quote from: chemlud on April 20, 2017, 10:35:38 am
The world is full of used Dell Optiplex (SFF) with i3 or i5 Processors. Have a look, find some (small form factor = SFF) with 2 PCI slots and buy two Intel 2xGbit cards. Have a total of 5 interfaces, 4-8-16 GB RAM, and some decent CPU power. All for about 200 to 300 bugs.

Rock solid. If you need more power find a used Dell Precision workstation :-)

Perhaps this (http://www.ebay.com/itm/Fujitsu-Esprimo-E500-Intel-Core-i5-2400-4GB-RAM-320GB-HDD-DVD-Rom-ohne-OS-/192162001155?hash=item2cbdbf7103) with a dualport Intel Pro 1000 card would do the trick?
Title: Re: Hardware for 1000/1000 internet?
Post by: chemlud on April 25, 2017, 02:22:29 pm: http://www.ebay.de/itm/DELL-Optiplex-990-SFF-i5-2400-QuadCore-4-GB-Ram-250-GB-HDD-DVD-Rom-/112212456072

or US e.g.:

http://www.ebay.com/itm/Dell-Optiplex-790-SFF-Windows-10-Pro-Core-I5-DVD-3-4GHz-4GB-WiFI-ready-/332144506909

http://www.ebay.com/itm/Dell-Optiplex-790-SFF-Computer-Quad-Core-i5-2400-3-10GHz-4GB-250GB-Win-7-Pro-x64-/112354763884

...can only speak for Dell. ;-)

Using Precision and Precision Mobile for 15 years. Only thing I changed is a fan in a machine doing 24/7 for over 8 years. Someone told me it's the Mercedes-Benz of computers. Rock solid... (I bought them new in the beginning, nowadays I take 2-3 year old leasing stuff. Never was let down...).
Title: Re: Hardware for 1000/1000 internet?
Post by: THB on April 25, 2017, 04:31:06 pm: Well, I live in Sweden so shipping from the US can be bit costly.

I think I will go for the Fujitsu I linked earlier although I know Dell and HP are really good.
Title: Re: Hardware for 1000/1000 internet?
Post by: chemlud on April 25, 2017, 05:01:10 pm: Hej granne! :-)

But ebay.de should then be an option (first link) or

http://www.ebay.de/itm/Dell-Optiplex-780-SFF-2x-3-33Ghz-4GB-RAM-500GB-HDD-Win7-DVD-TOP-/361959884242
Title: Re: Hardware for 1000/1000 internet?
Post by: THB on April 26, 2017, 04:33:09 pm: I just found this (https://www.inrego.se/webbshop/begagnad/kampanjer/Fujitsu_Esprimo_E710__SFF_/nr/104149) Fujitsu Esprimo E710 SFF with an Pentium G645 (Passmark ~2600) for just 993sek including shipping (~$113).

I'm thinking of grabbing one, and if the throughput is to slow I can upgrade to an i3/i5/i7 since it's a standar LGA1155 socket.
Title: Re: Hardware for 1000/1000 internet?
Post by: Nnyan on May 04, 2017, 10:54:21 pm: I'm a HUGE fan of the Dell Optiplex SFF units (not the USFF which you can't install another NIC). I currently have two SFF and one MT (two being 7010 and one 9020). OPNSense is running on a 7010 with a Core i5-3470S and 8GB of RAM off of a 50GB enterprise MLC SSD (got it cheaper then my typical USB stick I would have used). I paid $125 for the 7010 barebones and CPU (barebones came with the 8GB of DDR3). Add another $25 for the SSD and I'm really happy with the performance (not sure how to benchmark it). Absolutely quiet and if you want ESXi 6.5.0 installs without a hitch.