Search results

If you have an older PSU and new-ish drives, it's worth checking whether your drives use the SATA Pin 3 Power Disable command. If so, there are various fixes - I just pulled pin 3 out of the PSU-end connector on the SATA loom using a pin extractor tool. Apologies if you've already been through...

It's been a while... the day job has been taking up my time. For anyone interested in this topic, here's what I bought in the end: Lenovo M920q i5-9500t (6C/6T, base 2.2GHz, turbo 3.7GHz) 8GB 256GB SSD £334 ebay Lenovo PCIE4 Riser Card 01AJ929 £26.40, ebay (note this is the PCIE x4 version of...

I seem to have opened a can of worms. I didn't expect so many replies, TBH. I'm just not paranoid enough to go and buy a sparcstation to use as a firewall. If I have got their attention then I should assume they have already exfiltrated all the data they want (considering, for example, the flap...

I have one server for ESXi and an Asrock Deskmini which serves DNS and acts as a repository for ESXi backups (I cannot store those on my FreeNAS VM, since that runs on ESXi, so it's a vicious circle type of problem). But I digress... Putting ESXi interfaces on the internet doesn't pass the...

You make some very good points... I've pretty much decided to buy some dedicated hardware, plus I'm fairly unhappy about the thought of connecting ESXi directly to the internet.

Hi, the QNAP QSW-1208-8C has a mix of RJ45 and SFP+ ports; up to 12 can be in use at a time including up to 8 RJ45 ports. From QNAP's website: "The 10GbE SFP+ ports are backward compatible with 1GbE SFP; the RJ45 (copper) combo port supports up to five speeds (10G/5G/2.5G/1G/100M)". It costs...

If you only need L3, and no firewalling, you could look at TNSR ? (TNSR Home+Lab)

As a suggestion, try to find out if both traffic streams are going down the same cable (check port counters). That seems the most likely scenario. If so then it just means that the load-balancer has picked the same link for both combinations of IP+MAC. Unfortunately, this is a problem with link...

That CRS309 was reviewed here on STH: https://www.servethehome.com/mikrotik-crs309-1g-8sin-review-inexpensive-8x-10gbe-switch/. In summary, it's a line-rate device at L2, but not at L3.

Thanks! I had a quick look at the Jetway website as well and it's well organised, with drivers, manuals, etc.:)

Suricata is a nice-to-have. I don't know whether it does the re-encrypt part. Thank you. That's exactly the sort of information I was hoping for. Not sure if Passmark is a reliable indicator here, but that CPU gets a Passmark score about 1.3x higher than the Core I5-7200U I was originally...

Thanks! - will take a look. There are loads of options to consider... I gave some more thought to your previous post as well. Actually, I only really need separate hardware for the public internet. Internal VLAN-to-VLAN firewalling (if required) probably can run on pfsense on ESXi... if I cut...

Well, $1500 is certainly above my budget. I'm just looking at pricing for that SuperMicro X10SDV-4C-TLN2F. A US seller has one on offer 2nd hand and will ship to the UK for $229, $19 shipping and $57 import; total $305. Case £50, nano 12V PSU and AC/DC adapter block, £79, 2x8GB unbuffered ECC...

Thanks - the Qotom offerings are similar to the Kettop box that I mentioned at the top of the thread. There are a few of these vendors doing cheap 4x1G or 6x1G boxes, specifically for pfsense and similar uses. I wouldn't have a bonding issue on the upstream side, as my ISP delivers their...

Erm, it's not just a router... the more advanced firewalls are doing SSL/TLS inspection - decrypt/packet inspection/re-encrypt, so the CPU load is way more than just L3 forwarding. What $60 hardware are you using that can do 1G symmetric with firewalling, IDS and IPS enabled ? I'm genuinely...

Thanks - was looking at that unit earlier today. Anandtech seemed happy with it, which is encouraging.

Thanks! I get the point about vendor lock-in with proprietary hardware. But there is another side to the decision which is that the self-build option will probably not be compact and fanless like the Netgate and OpnSense solutions (WAF problem), and by the time I've added in a case, fans, PSU...

... and none of the roll-your-own options get close to it in terms of compactness and passive cooling (both major WAFs). It's very tempting, despite the price. On the other hand, OpnSense has not been around for as long as Netgate and has 3 employees versus Netgate's 75. Decisions, decisions...

Yes - that problem is especially acute with Supermicro. Very hard to find 2nd hand.

Thanks! Both the Netgate and the OpnSense box claim to support (at least) 10Gbit/s for rules-based firewalling (not IPSEC) so I'm tempted to say I'll future-proof to that level - given that the 1G solution (option #1) is $550 and 10G from Netgate is $699, I'd take the 10G option as a no-brainer...