cheap pfsense hardware w/aes-ni?

Discussion in 'DIY Server and Workstation Builds' started by Jannis Jacobsen, Dec 10, 2018.

  1. Jannis Jacobsen

    Jannis Jacobsen Active Member

    Joined:
    Mar 19, 2016
    Messages:
    309
    Likes Received:
    52
    Considering building a pfsense or opnsense box for home use.
    500/500 fiber connection.
    would like decent performance with suricata, vpn ++

    Been looking at the mbt-4220 system for $199, but they don’t ship to Norway, and I’m not sure how much vpn performance I’d get.
    2Gb ram is also not much, if I were to run various plugins.

    -j
     
    #1
  2. zer0sum

    zer0sum Active Member

    Joined:
    Mar 8, 2013
    Messages:
    258
    Likes Received:
    77
  3. Jannis Jacobsen

    Jannis Jacobsen Active Member

    Joined:
    Mar 19, 2016
    Messages:
    309
    Likes Received:
    52
    #3
  4. zer0sum

    zer0sum Active Member

    Joined:
    Mar 8, 2013
    Messages:
    258
    Likes Received:
    77
    I don't use Suricata/VPN right at this moment, but I can max out my 1G link with a standard sort of config...

    upload_2018-12-10_13-33-26.png
     
    #4
  5. nthu9280

    nthu9280 Well-Known Member

    Joined:
    Feb 3, 2016
    Messages:
    1,417
    Likes Received:
    357
    OpenVPN speed will be limited to 130mbps. CPU was about 50% on both cores during the VPN test. Then you have additional load due to surricata. Simple routing of 1gbps is not a problem.

    The linked thread should have the metrics.
     
    #5
    Jannis Jacobsen likes this.
  6. casperghst42

    casperghst42 New Member

    Joined:
    Sep 14, 2015
    Messages:
    29
    Likes Received:
    8
    #6
  7. Jannis Jacobsen

    Jannis Jacobsen Active Member

    Joined:
    Mar 19, 2016
    Messages:
    309
    Likes Received:
    52
    I’ve considered it, bit it get’s quite a bit more expensive than the t620 plus.
    $190 + 25% import tax and a $18 fee on top
    (apu2d4, cant find apu2c4 anymore)

    -j
     
    #7
  8. zer0sum

    zer0sum Active Member

    Joined:
    Mar 8, 2013
    Messages:
    258
    Likes Received:
    77
    It's really hard to beat the T620 plus and a HP NC365T quad port NIC :)

    I paid just under $100 for both delivered in days from Ebay. Really impressed so far!
     
    #8
  9. Jannis Jacobsen

    Jannis Jacobsen Active Member

    Joined:
    Mar 19, 2016
    Messages:
    309
    Likes Received:
    52
    Oh, and pfsense/opnsense as they are bsd based, seem to not handle more than ~650Mbit on the apu2.
    Linux based os almost manages wirespeed.

    -j
     
    #9
  10. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    505
    Likes Received:
    117
    I used to recommend these, and bought quite a few, but their ongoing inability to deliver a stable firmware update has made me throw in the towel. For a long time I just told people that if it was stable for them out of the box then just go with it, but don't ever expect any promised features or bug fixes to materialize. Now I've decided that level of support is just not good enough to keep rewarding (after literally 4 years of hoping they'd get their act together).
     
    #10
  11. Jannis Jacobsen

    Jannis Jacobsen Active Member

    Joined:
    Mar 19, 2016
    Messages:
    309
    Likes Received:
    52
    Oh, I’m also not sure if pfsense is what I’ll use.
    I have been looking at pfsense, opnsense, sophos utm, untangle homepro.
    Sophos is kinda interesting, but not sure if 50 ip’s will be enough.
    Untangle sounds nice, but It’s a bit «unknown» here in Norway.

    any input to make it easier/harder to choose? :)

    -j
     
    #11
  12. ullbeking

    ullbeking Active Member

    Joined:
    Jul 28, 2017
    Messages:
    368
    Likes Received:
    29
    I'm seriously thinking about a combination like this too. But I have a couple of questions first that perhaps you'd know the answer to:
    1. Why the HP NC365T quad-port NIC? Doesn't the T620 PLUS already come with four NIC ports? Or was this additional made to expand the thing to eight ports? (In which case this would indeed be awesome.)
    2. Is the additional HP NC365T using the same model of controller as the on-board NIC's?
    3. Would an Intel quad-port NIC would work well?
    4. What are you using it for? (pfSense vs OPNsense, what sort of configuration, how much RAM and SSD's, etc?)
    Thanks!!

    ullbeking
     
    #12
  13. Jannis Jacobsen

    Jannis Jacobsen Active Member

    Joined:
    Mar 19, 2016
    Messages:
    309
    Likes Received:
    52
    1. this is hp branded intel card afaik, no, no quad port default, some had a fiber card
    2. no,intel based
    3. see 1 and 2

    -j
     
    #13
  14. ullbeking

    ullbeking Active Member

    Joined:
    Jul 28, 2017
    Messages:
    368
    Likes Received:
    29
    Ahhh, thank you @Jannis Jacobsen, that clarifies a lot for me. When I looked at the rear view here: https://www.servethehome.com/hp-t620-plus-thin-client-and-firewall-vpn-appliance/ I thought that those four NIC ports were stock, on-board Ethernet ports.

    Now I've wrapped my head around it a bit more and I realize that the "PLUS" designation means that you get the x4 PCI-e slot in which one may install a 4-port NIC... so this means the photo in that link already had non-stock hardware installed. And therefore, getting a "PLUS" instead of a non-PLUS, is pretty much mandatory for the use cases we're discussing here. Have I got this right?
     
    #14
  15. gigatexal

    gigatexal I'm here to learn

    Joined:
    Nov 25, 2012
    Messages:
    2,683
    Likes Received:
    498
    There’s a userspaxe implementation of wireguard for the BSDs that should fix the VPN penalty
     
    #15
  16. WANg

    WANg Active Member

    Joined:
    Jun 10, 2018
    Messages:
    493
    Likes Received:
    186
    Well it's not just a PCIe slot.
    HP makes 2 models of the t620 thin client. The t620 (left) and the t620 Plus (right)

    [​IMG]


    The stock t620 is a thin client with a dualcore AMD Jaguar based APU (GX217GA), 2 RAM slots, 2 displayports and mSATA. The t620 Plus has a quadcore AMD Jaguar APU (GX420CA), 2 RAM slots, 2 displayports, mSATA, and a PCIe 2.1 x4 slot typically used to house an optional AMD FirePro 2270 video card (practically worthless) providing an extra 2 displayports. The t620 is what you buy if you need to drive 2 2560x1600 screens, and the t620 Plus is what you'll buy if you need to drive 4. If you want 6, that's t730 territory.

    So to summarize, t620 gets you a dualcore APU, t620 Plus gets you a quadcore APU and a PCIe 2.1 x4 slot.
     
    #16
    ullbeking likes this.
Similar Threads: cheap pfsense
Forum Title Date
DIY Server and Workstation Builds HP T630 wifi cheap solution. Oct 29, 2019
DIY Server and Workstation Builds Cheap Ryzen with ECC Mar 24, 2019
DIY Server and Workstation Builds Cheap FreeNAS Build Apr 29, 2018
DIY Server and Workstation Builds predicting RAM values/when cheap again/where cheapest now? Jan 7, 2018
DIY Server and Workstation Builds Yet another cheap build question Nov 12, 2017

Share This Page