Intel Core 2 Duo E8200 desktop as OPNsense router

Started by Inxsible, February 07, 2021, 08:35:16 AM

Previous topic - Next topic
February 07, 2021, 08:35:16 AM Last Edit: February 07, 2021, 08:47:07 AM by Inxsible
Hi,
I am in the process of migrating from pfSense.

I have configured OPNsense in a VM and now it's time to move it to dedicated hardware. I have an old desktop (11 year old) that is not in use and I plan to use it as the router. I was wondering if the following hardware will work for 600 Mbps/35Mbps speeds? Or am I pushing it?

Intel Core 2 Duo E8200  -- 64bit -- yes it's not AES-NI capable
8 GB RAM
Intel i340-T2 card
60 GB HDD

I intend to use the basics and not indulge with Suricata etc with this particular build. The usage will be:

  • multiple VLANs -- about 5
  • Basic Traffic Shaping
  • OpenVPN Server -- I know this could be a bit difficult -- but i don't need to have 600Mbps here but it should be decent
  • DHCP Server, Unbound resolver, firewall rules, etc -- again just basics

So mainly my questions revolve around

  • will the hardware be sufficient to push a 600Mbps/35Mbps Comcast connection for daily usage -- about 10-12 devices with no more than 6 on at the same time.
  • Will the VPN Server connection provide a decent speed even if it is not 600Mbps (max 1 or 2 connections when on the road) not very frequently

February 07, 2021, 09:23:08 AM #1 Last Edit: February 07, 2021, 09:25:14 AM by marjohn56
I think it's pushing it, though there's only one way to be sure, No AES-NI is going to be an issue.

Specs are here.

https://docs.opnsense.org/manual/hardware.html
OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member

Quote from: marjohn56 on February 07, 2021, 09:23:08 AM
I think it's pushing it, though there's only one way to be sure, No AES-NI is going to be an issue.

Specs are here.

https://docs.opnsense.org/manual/hardware.html
I read that hardware specs and my old desktop passes even the Recommended hardware. I have a 2.66Ghz CPU with 8GB RAM which is why I thought of using that machine.

is AES-NI going to be an issue with VPN -- I am ok if I get less bandwidth when connected via VPN server -- as long as it isn't super slow.

It will be an issue with the VPN, however the CPU SHOULD be fast enough to cope with it. It's a dual core which is 'Reasonable' under the specs, Quad or above is 'Reccomended' the way I read it. However the E8200 is clocking at 2.66Ghz so it's swings and roundabouts. Try it, then post the results. :)
OPNsense 24.7 - Qotom Q355G4 - ISP - Squirrel 1Gbps.

Team Rebellion Member

Quote from: marjohn56 on February 07, 2021, 10:04:23 AM
It will be an issue with the VPN, however the CPU SHOULD be fast enough to cope with it. It's a dual core which is 'Reasonable' under the specs, Quad or above is 'Reccomended' the way I read it. However the E8200 is clocking at 2.66Ghz so it's swings and roundabouts. Try it, then post the results. :)
OpenVPN -- from what I understand doesn't utilize multiple cores but rather higher the clock speed the better it is.

Not sure about Wireguard. I want to dabble into Wireguard, but for now though, I am just trying to replicate the current pfSense configuration that I have...so I think it might work.

Thanks for the confirmation. Time to start installation.....