inexpensive pc with dual intel lan

[DiceAir]

Hi there

Currently using untangle free version on an old i3 maching. I want to move to OPNsense and looking for something inexpensive. I'm from South Africa so can order from local and amazon.com so no ebay or aliexpress please.

We will be running either suricata, zenarmor (free version) or both so what do you guys suggest. I will also be doing ssl inspection. We don't have many workstations only about 6-7 of them but we are running vlans for cameras, phones, workstations, servers (about 4 servers), IoT. I also want to do SSL inspection and dns filtering using unbound and also ip address list I will add to the firewall. So can anyone suggest me a pc with dual intel lan cards.

Internet is 300mbps down and 150mbps upload might be faster in the near future to like 1Gbps or faster. I want to go as cheap as possible.

I don't mind if it's not fanless. I'm doing router on a stick as it's easier to manage with the switches I have and so far working great

[Patrick M. Hausen]

I run a Beelink ME mini as a small NAS and I am very satisfied with the unit.

They have a variety of models, something like the EQ14 N150 might fit your requirements. If you pick the 2x 2.5 Gbit/s model you get Intel based network interfaces, 16 GB of memory, 500 GB of SSD - at 229 USD total.

HTH,
Patrick

[DiceAir]

I run a Beelink ME mini as a small NAS and I am very satisfied with the unit.

They have a variety of models, something like the EQ14 N150 might fit your requirements. If you pick the 2x 2.5 Gbit/s model you get Intel based network interfaces, 16 GB of memory, 500 GB of SSD - at 229 USD total.

HTH,
Patrick

thanks for the reply. will that n150 be enough for what I want to do? if a n150 is good enough for my usage case then I might as well get this. The pc will be in a server room with aircon on all the time

https://www.amazon.com/Upgraded-Desktop-Computers-Display-Business/dp/B0F388KC4V/ref=sr_1_4?crid=2QZVPDKF2W7JD&currency=ZAR&dib=eyJ2IjoiMSJ9.kM0-HFz3da4A-AiVP-ifX_YjeKLHnrCTDGNWSZKUtk7nO7r9gQH-m7POx3kTmgJLUWZWYh8TNBF4jJ2QuhZ2yogO5bR5nS0c4urcqalPde5Xln8BGutEX8Fa1IWNdNJKD1ArYPAB0wgXhu-evtaITRCHNkD-uh_i1YSpiL7TUHzHyNQA1uO0s3OHN0HMLEAVadmQzWurlWpfSnl8FgrH0o1w1tRwcCK28B6HOAaRbKs.nMxZpTr5tu_eakgqF0pnaERWkAsPdi_HX8bJtTvY33U&dib_tag=se&keywords=dual%2Bintel%2Bnic%2Bmini%2Bpc&qid=1759734420&sprefix=dual%2Bintel%2Bnic%2Bmini%2Bpc%2Caps%2C346&sr=8-4&xpid=LpuPV63pDiKEg&th=1

[BrandyWine]

The twin lake mini pc listed is ok, but the RAM is soldered onto mobo, fixed at 12GB.
Just make sure you flash the i226 nvram.

[Linwood]

I was unable to find a beelink with intel NIC's at 2.5g.  They recommended a SER5 but when I got it, it had only one NIC.  The latest they suggested was a pretty pricy GTi12 but I haven't been able to confirm which brand NIC's they have (I asked them but each Q&A takes overnight).

If this is a business, and you have a network closet or somewhere that size and noise is not so much an issue, older desktops with PC bus will give you a lot of performance and you can easily buy an Intel dual NIC for it. Mostly as a test I'm running a 2016 vintage desktop with new dual 10g NIC's and it works great.  But I've been looking at a bunch of brands for at least dual 2.5 Intel and few of the low price ones have that except ones with N100 or N150, which I do not want to bet on since I may start running various analysis programs that may eat up those slow processors even if they work great for just plain firewall rules.

[Patrick M. Hausen]

I specifically linked to one with 2x 2.5G Intel in my post.

[BrandyWine]

a 2016 vintage desktop with new dual 10g NIC's and it works great. 

Many of the 10G nics have issues linking at some speeds. Intel seems to have issue with 2.5 and 5Gb speeds.

And then you have 10G what for layer-1? Copper or fiber?

I think the ask was to achieve 2.5Gb, usually gonna be copper.

I specifically linked to one with 2x 2.5G Intel in my post.

I wonder is country origin is the issue for buying it? The Beelink site also shows it as Sold Out for any country selected.

[Linwood]

I specifically linked to one with 2x 2.5G Intel in my post.

Yes, as I mentioned "except ones with N100 or N150".  There are a lot available with slower processors, which are perfectly adequate for basic firewall functions. As well as some fancy ones like Protectli that are more costly but quite nice.

What's nice is some in that space have SFP+ slots, which if you are trying to do multi-gig and can use DAC to a switch, saves power and heat.  The closest I've found to that with faster CPU's is the MS-01 from minis forum.

[Linwood]

Many of the 10G nics have issues linking at some speeds. Intel seems to have issue with 2.5 and 5Gb speeds.

And then you have 10G what for layer-1? Copper or fiber?

I think the ask was to achieve 2.5Gb, usually gonna be copper.

Sorry, I wasn't saying the OP should get 10g, just making a comment as example that older PC's with newer NIC's can be a good option if space/sound/power is not an issue. Nice 2.5g Intel NIC card in a several year old PC could make a nice cheap firewall with better performance than some of the mini's in the cheap price ranges being discussed.

[BrandyWine]

Beelink i3 16/500, for this price, if all you need is two 1Gb rj45 ports and possibly an add-on usb3 wifi, wow.
Product B0F3X91S2L on amzon

2.5Gb N150 version B0C339KVH9

If 1G is good enough, that i3 is very good.

Weird that they match N150 with i226v 2.5G, and i3 with only 1Gb nics. And i3 with i226v nics would be ideal.

[Linwood]

yeah, if 1g works, this is the one I use: Beelink Mini PC EQi12, Intel Core 1220P

It uses realtek NIC's, and does NOT require the plugin (in fact it stopped working with the plugin, oddly).  But it is realtek 9as I think most of theirs are, but it's really hard to find out on their website.  That's $300 with 16gb/500gb in the US on Amazon not on sale (yet, may be momentarily since it's prime days).

**** Update next day **** This box does need the plugin, but will not work with it unless you ensure the offload settings are disabled (Interfaces, General, top three options).  They are disabled by default but I had enabled.  With enabled the plugin itself hung one interface, but under stress they also hung.  With the plugin and offloading disabled the box seems more stable under load, but I would still not buy Realtek for Opnsense if I had to do it again. *****

[DiceAir]

yes I would prefer not to have any realtek NIC as I tried before and to many issues when using it on the wan side

[BrandyWine]

yes I would prefer not to have any realtek NIC as I tried before and to many issues when using it on the wan side

Does the EQi12 use realtek nic?
The little n150 (not a bee) I got seems to be doing just fine for me, 3 226's and 2 x520's.

[Linwood]

Does the EQi12 use realtek nic?

Yes.  per Beelink support some GTi's have intel:

To clarify regarding our GTi series:

GTi12 / GTi13 / GTi14 – Equipped with Intel I226-V 2.5G LAN

GTi15 – Equipped with Intel E610 10G LAN

[BrandyWine]

The e610 is not yet supported natively in FreeBSD, but there's workaround for that.

If 2.5G and ability for 10G (x520) is good, then there's plenty of those available. I got the bare bones version and installed 16GB ram and 256GB ssd of my choosing. Works really good for me, little box handles my 1.2Gb ISP pretty good.