Messages

I ran a health check and the only issues I'm seeing are related to py37-markupsafe. This appears to be an earlier issue. See https://forum.opnsense.org/index.php?topic=26835.0

I just upgraded from 22.1.6. It got to "[39/40] Extracting opnsense-22.1.7: .." and hung. Eventually I decided it would just stay there forever so I hard rebooted fearing the worst but it came back up and the system says it is running 22.1.7.

You might want to contact Compulab about their Tensor PC. Like the Fitlet, it can be configured with lots of different types of I/O, networking, and storage modules. In their Introduction to Tensor PC doc they list a module with 2x 10 Gbit Ethernet ports. My guess is that this is currently under development but you might be able to set it up with 1G support in the knowledge that 10G could be added later. It has several CPU options including  Celeron G4932E, i3-9100HL, and i7-9850HL which all have TDPs of 25w. It's fanless.

http://fit-pc.com/wiki/index.php?title=Tensor-PC

In used fitlet2 with celeron CPU till recently, and it can do 1Gbps pppoe with ease. But i didn't run any additional plugins like suricata or zenarmor. For openvpn it can do 500mbps. Hope it helps, its a great little box just running a little hot.

I am running my Fitlet2 J3455 with Zenarmor. I am on a 300 Mbps connection. It's using about 2gb of the 8GB of  RAM I have installed. The CPU isn't being taxed but I'm only using it on a home network. Every time I check the temp it's running around 46C to 47C.

The single core performance of all the new Elkhart Lake CPUs (x6211E, J6412 & x6425E) in the Fitlet3 are a lot faster than the J3455: https://www.cpubenchmark.net/compare/Intel-Celeron-J3455-vs-Intel-Atom-x6211E-vs-Intel-Celeron-J6412-vs-Intel-Atom-x6425E/2875vs4347vs4474vs4753

The Fitlet3 also supports DDR4 and NVMe drives. I believe the NICs are Intel I210.

The Compulab Fitlet3 (https://fit-iot.com/web/), which is supposed to ship in April but can be ordered now, has up to 4 Intel LAN ports. I'm using a Fitlet2 with J3455 at the moment and I think there are probably a few other Fitlet2 users here.

Newer devices with 10nm Elkhart Lake chips are starting to appear as well e.g. J6412 (10W).

https://www.cpubenchmark.net/compare/Intel-Atom-x6211E-vs-Intel-Celeron-J6412-vs-Intel-Atom-x6425E/4347vs4474vs4753

- runs OPNsense 20.x
- is silent
- ideally fanless
- low energy consuming
- has ssd instead of hdd
- 5 NICs would be great, but I can live with 4 NICs too
- small case size
- how much RAM and which SSD size would you recommend?

See my earlier post on Fitlet2: https://forum.opnsense.org/index.php?topic=16765.msg76481#msg76481.
Up to 4 NICs.

The same company is in the process of releasing the Tensor PC I20A which will be a step up in power and the flexibility to configure add-ons. It can take a lot more NICs (up to 20), including PoE and  SFP+ modules. The first models are supposed go on sale in November.  https://fit-iot.com/web/products/tensor-pc/i20a-specifications/. May be overkill but the idea is you can easily configure whatever you want to suit your needs.

I don't know about the interfaces, given that I honestly want it to last. If I have 10Gb infrastructure in the future I'd want this firewall to handle that too. Ideally both WAN and LAN could be SFPs?

I have no idea. I imagine you'd need a much more powerful CPU to handle 10Gb. Some of the higher-end Qotom boxes might make more sense or wait for an appropriate Tensor-PC.
https://linuxgizmos.com/compulabs-embedded-tensor-pcs-take-modularity-to-the-extreme/

Cannot remember when I jumped ship now, late 2017 I think...( checks his inbox )... nope, December 2016, tempus fugit!

I must have followed you later.  I remember finding your posts very useful and then they deleted them all.

Thanks. I guess the other issue is that it uses i211 Intel stuff, which means that if I want to move to Sophos, I'd have to buy new hardware?

There is some discussion of the Fitlet2 on the Sophos Community boards (I was originally going to run XG after I gave up on my original idea of using pfSense):
https://community.sophos.com/products/unified-threat-management/f/hardware-installation-up2date-licensing/109125/qotom-protectli-fw2b-appliance-fitlet2-j3455-purchased?pi2353=1

There is also a long discussion in this thread on the Finnish board I referenced before that discusses different devices and software configurations. At least one user had Sophos XG running on the Fitlet2:
https://bbs.io-tech.fi/threads/tee-se-itse-rautapalomuurit-pfsense-sophos-utm-mitae-kaeytaette-ja-miksi-juuri-se-vaihtoehto.14625/page-8#post-3615316
https://bbs.io-tech.fi/threads/tee-se-itse-rautapalomuurit-pfsense-sophos-utm-mitae-kaeytaette-ja-miksi-juuri-se-vaihtoehto.14625/page-10#post-4370713

And I am one of them... jumped ship before they could ban me!

I think we may have jumped at around the same time. I remember there was a huge long thread with lots of information on using Qotoms and they just deleted it all. I reckon they they did me a favor.

pmhausen said that a low power Apu board wouldnt cut it because

"The PCengines box will get you 512 Mbit/s throughput but not with additional services. Most people want IDS/IPS for ingress ;)"

Would I not run into the same problems here?

I don't know as I am not running IDS/IPS on mine at the moment but see https://bbs.io-tech.fi/threads/palomuuri-1gbit-kuituliittymaelle.74958/#post-2855744 and other discussion on the same board. You will need to use Google translate unless you read Finnish.

nobody has a problem with pfsense over here, only the other way around, you get banned in the forums for mentioning OPNsense. ;-)

Qotom is also a non-topic there. There are not a few people here rather than there as a result of their behavior.

Worth checking out Fitlet2 with J3455 at https://fit-iot.com/web/products/fitlet2/fitlet2-specifications/.
Fanless and low power but not sure it meets all the requirements of OP. Same company has a new series of devices coming out called Tensor-PC. Details are a bit sketchy at the moment but looks interesting.

The Fitlit2 is made by https://www.compulab.com/de/. There is a list of resellers here: https://www.fit-pc.com/web/purchasing/.

Take a look at Fitlet2 with J3455: https://fit-iot.com/web/products/fitlet2/