pfSense RAM and CPU

Discussion in 'FreeBSD and FreeNAS' started by brianmc, Jun 25, 2018.

  1. brianmc

    brianmc New Member

    Joined:
    Jun 25, 2018
    Messages:
    23
    Likes Received:
    7
    What's the going assumption on RAM for pfSense.

    I am not doing IDS, just as a VPN and NAT gateway. I'm upgrading to Xeon D1508 and Xeon D-1518

    Do I need dual channel RAM or can I get away with single channel?

    8GB x 1 or 8GB x 2 enough or should I use 16GB DIMMs?
     
    #1
  2. PigLover

    PigLover Moderator

    Joined:
    Jan 26, 2011
    Messages:
    2,650
    Likes Received:
    1,039
    Your question really needs more context - some info on how may links and what data rates or packet-per-second rates you expect would help a lot getting you a good answer.

    That said, in its basic form as a simple firewall/NAT and VPN endpoint, pfSense is not memory hungry at all. Even 8GB would be overkill for that, though in a Xeon D you probably want to use 2x4GB to get there just to keep the memory channels populated (it probably won't make much difference in performance though).

    If you start to add a bunch of add-ins like Suricata or other things then memory usage might climb. But probably not much.
     
    #2
  3. brianmc

    brianmc New Member

    Joined:
    Jun 25, 2018
    Messages:
    23
    Likes Received:
    7
    Thanks. I'm not sure what they'll be for pps. Bandwidth no more than 100mbps which is why I'm staying low in the Xeon D range. That's really helpful and I appreciate you taking the time to answer.
     
    #3
  4. mstone

    mstone Active Member

    Joined:
    Mar 11, 2015
    Messages:
    402
    Likes Received:
    96
    you can't buy a new computer slow enough that firewalling 100mpbs would be a problem, nor can you buy a new computer with a small enough RAM configuration to find the lower limit. a xeon d is tremendous overkill, but if it's what you want it will work fine.
     
    #4
  5. fohdeesha

    fohdeesha Active Member

    Joined:
    Nov 20, 2016
    Messages:
    361
    Likes Received:
    239
    Insane overkill - my largest pfsense instance has 2GB of ram, and I've never seen it use more than 700MB. using an ancient i3 and it has no problem routing and firewalling 1gbps. xeon is crazy fammmm
     
    #5
  6. brianmc

    brianmc New Member

    Joined:
    Jun 25, 2018
    Messages:
    23
    Likes Received:
    7
    My reason for Xeon D is that I'm going to have it on my 10G network LAN side. WAN is no more than 100mb but LAN might be more.

    I'd also pay to avoid having to upgrade soon.
     
    #6
  7. fohdeesha

    fohdeesha Active Member

    Joined:
    Nov 20, 2016
    Messages:
    361
    Likes Received:
    239
    The lan traffic will never touch your router assuming it's on the same subnet
     
    #7
  8. Nizmo

    Nizmo Member

    Joined:
    Jan 24, 2018
    Messages:
    98
    Likes Received:
    16
    I use 8GB DDR4 and 8 Cores (E5-2699 V4) on a Virtual Machine for PfSense for 10Gb connections bonded to 20Gb.

    I see up to 75% CPU loads and 30-50% mem loads.

    Although I am using IDS (Snort, VPN, Multi-WAN)
     
    #8
Similar Threads: pfSense
Forum Title Date
FreeBSD and FreeNAS Small pfSense compatible box w/ wifi Dec 31, 2017
FreeBSD and FreeNAS Pfsense VM Sep 28, 2017
FreeBSD and FreeNAS How does PfSense number the network interfaces? May 26, 2017
FreeBSD and FreeNAS PFSense interrupt issue? Oct 13, 2015
FreeBSD and FreeNAS When will pfsense 2.2-RELEASE happen? Dec 3, 2014

Share This Page