I do not run anything that is dual os or hypervisor as some people call is or as you are referencing as ESXi unless the box has over 40+ cores above 2.5 ghz and has over 100gig of ram. Systems above that I have found to have benefits to running dual os. Since I run over 100+ systems and have been for over 20 years now. If the system is under that level of resources, you do not get any benefits of VM / Dual OS and you actually lose resources!I have not tested opnsense under dual os yet. My guess it should have no problem doing what you are after with dual os setup. From what I saw of Ryze 1700, when I saw it in austin at AMD office is a okay processor. Their arm line coming out is better in my opinion. Will the 1700 do it? I do not know but my gut would say yes it should with dual os.
5ghz for opnsense + 4ghz for your VPN load = 9 ghz so call it a even 10 ghz total compute you need just in operations of code. Then times it by 2 for dual os so you are looking at 20 ghz in total compute for all operations of code.https://www.amd.com/en/products/cpu/amd-ryzen-7-1700xReal compute is 30 to 31 ghz compute on ryzen 1700. So you are right near the max of what it can do by the numbers with a little over or under depending on how you want to look at it around 70% you have not put in the OS overhead if it is more than double...1 for 1 on dual os side... or your VoIP stuff if it would not fit into the 10 ghz where opnsense is allotted...so you would be pushing the limits in my opinion...You will be at the max of what the cpu can do or over what the cpu can do.I found systems work best when load is keep to under 1/2 of what the system can do. Extra 50% allows for unknown events like cpu issues or memory or io issues. So I do not allow anyone to run systems over 50% of their calc ability. Just my hard rule I make everyone do in my company.
I do not run anything that is dual os or hypervisor as some people call is or as you are referencing as ESXi unless the box has over 40+ cores above 2.5 ghz and has over 100gig of ram. Systems above that I have found to have benefits to running dual os. Since I run over 100+ systems and have been for over 20 years now. If the system is under that level of resources, you do not get any benefits of VM / Dual OS and you actually lose resources!I have not tested opnsense under dual os yet. My guess it should have no problem doing what you are after with dual os setup. From what I saw of Ryze 1700, when I saw it in austin at AMD office is a okay processor. Their arm line coming out is better in my opinion. Will the 1700 do it? I do not know but my gut would say yes it should with dual os.5ghz for opnsense + 4ghz for your VPN load = 9 ghz so call it a even 10 ghz total compute you need just in operations of code. Then times it by 2 for dual os so you are looking at 20 ghz in total compute for all operations of code.https://www.amd.com/en/products/cpu/amd-ryzen-7-1700xReal compute is 30 to 31 ghz compute on ryzen 1700. So you are right near the max of what it can do by the numbers with a little over or under depending on how you want to look at it around 70% you have not put in the OS overhead if it is more than double...1 for 1 on dual os side... or your VoIP stuff if it would not fit into the 10 ghz where opnsense is allotted...so you would be pushing the limits in my opinion...You will be at the max of what the cpu can do or over what the cpu can do.I found systems work best when load is keep to under 1/2 of what the system can do. Extra 50% allows for unknown events like cpu issues or memory or io issues. So I do not allow anyone to run systems over 50% of their calc ability. Just my hard rule I make everyone do in my company.
How I wanted to use it is with AMD Ryzen 1700 (65w) processors, 64 gig ram, esxi 6.5, 1 or 2 four port nic cards. The OPNsense vm would exists along with freepbx among other appliances. Throughput doesn't have to be perfect just not abysmal. I was most interested in OPNsense due to the look of the interface to be honest. I've been into computers and doing IT for a long long time. It's like a car IMO. People will buy a shitty car as long as it looks nice and works mostly well. You could have the most stable car ever built but if it looks bad then sales probably will not be good. OPNsense has a good look to it. Clean and simple. If it can perform pretty well in day to day operations it is my choice over pfsense and sophos UTM software.
Ryzen is not well supported yet on hypervisors. ESXi simply doesn't, and KVM (all Linux actually) needs to be at kernel 4.10 or higher until the Ryzen bits are stable enough to be backported.
No problem, Arch Linux has 4.10.6
No Proxmox on Arch though
