Micro OPNSense 10Gb/s Build

Started by sparton175, March 23, 2025, 11:41:48 PM

Previous topic - Next topic
I'm working on picking out hardware for a very small (ITX or Mini PC) OPNSense system that will also run Zenarmor for a 3-10Gb/s fiber connection with a few dozen devices.

Right now I have a X710 as my NIC, and I'm between several different build options with estimated build costs:
Minisforum 7945HX Motherboard + 32GB + 2x256GB = $545
Minisforum MS-01 12900H + 32GB + 2x256GB = $520
Minisforum MS-01 12600H + 32GB + 2x256GB = $425
Embedded Motherboard 7940HS + 32GB + 2x256GB = $460
Embedded Motherboard 7840HS + 32GB + 2x256GB = $435
Embedded Motherboard 6900HX + 32GB + 2x256GB = $408

Am I way off track with these builds? Way overkill for what I need? I'm also open to other ideas that people have, the end goal is to try and keep this whole thing under $500 if possible.

That seems reasonable. I'd go for the MS-01.

I doubt you will achieve 10G IDS/IPS with anything in that price range.

Compare: https://shop.opnsense.com/dec800-series-opnsense-desktop-security-appliance/

2 G/s threat protection ...
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Quote from: Patrick M. Hausen on March 24, 2025, 09:21:05 AMI doubt you will achieve 10G IDS/IPS with anything in that price range.
Interestingly, the DEC4280 which got an AMD EPYC 3451 cpu, according to Youtube: Our BIG network upgrade! - OPNsense DEC4280, can do 7.5Gbps IDS. The CPU score is around 20'000, quite a bit less than the CPUs listed in OT's first post. Not sure about the PCIe lanes compared to OT's choices, or the network interfaces in use on the DEC4280.
Deciso DEC740

The datasheet says 2 Gbps IDS? Puzzled ...
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Quote from: sparton175 on March 23, 2025, 11:41:48 PM[...]
Right now I have a X710 as my NIC [...]

Some of those options seem to have built-in x710s, and no slots...

I have to agree that several of the big Alder Lake and Zen 4 CPUs listed should outperform the old embedded Zen 1 (DEC4280). Can't comment on content filtering performance, though.