Deciso DEC4280 vs. DYS

[damien92220]

Hello,

I saw that the Deciso DEC4280 is normally capable of 7.5 Gbps in IPS.

I would be on a DYS with the following hardware:

Intel Core i9 13900T
cpubenchmark 44099 multithread and 4222 single thread.

64 GB RAM
1 Tb SSD
mellanox connectx-3 MCX312A-XCBT or Intel X710-DA2 network card.

My internet connection is 8 Gbps symmetrical (for the French Freebox Ultra).

I mainly need IPS and maybe zenarmor.

With the information on Epyc of the DEC4280 and some information found on the forum, I think that in terms of performance and energy consumption it's not bad..... in theory!?

Thanks for your feedback.

[Greg_E]

If you build your own, I would generally pick an Intel NIC, but I seem to remember at least one person having an issue with the 710 card, so I might start with a 540 card.

That said, I have not built a firewall with any 10gbps cards yet, no needs for me so far. I've only just moved up to i350 cards.

You may have too much ram in that system, I don't think it will get you anything after about 16 or maybe 32gig of ram. If you keep the 64gb of ram, you should definitely install the zram cache to minimize disk writes for logs, even at 32gb I would turn this on.

All that said, I'm looking at the Deciso hardware to build the price into a future budget request. Not sure which model, that will kind of depend on what I think I can get to pass, but there are some good looking devices in the lineup.

[damien92220]

Hello,

I prefer a network card with SFP+ ports because I already have SFP+ modules in my current router.

As for memory, I seem to have read that ZenArmor is RAM-hungry, but I could be wrong.

I made my configuration as for the DEC4280!

[Greg_E]

ZenArmor is memory hungry! I expanded to 16gb to give me a little headroom, with IDS, Zenarmor, crowdsec running I am at about 50% ram now. Also still thinking of installing zram for log files to spare my ssd.

The Intel 540 cards are SFP+, just older so possibly better supported. With the mentioned specs, the 740 card would be able to take advantage of the faster speeds on the newer generation PCIe buss, but I think the 540 cards would still be OK being based on an older generation (gen2?)