recommendation for cheap mini-itx board for pfsense

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

Jannis Jacobsen

Active Member
Mar 19, 2016
365
79
28
45
Norway
Need recommendations for mini-itx board

Considering getting a proper pfsense firewall again.
Would be nice to do it on a small budget.
need intel nic (1 is enough, have pcie intel nic to add)

Has to be able to route my 500/500 (preferably enough to handle 1000/1000).

Want to fit it in a slim mini-itx case.
Thanks!

-Jannis
 
Last edited:

Patrick

Administrator
Staff member
Dec 21, 2010
12,507
5,785
113
I have had the X11SBA-LN4F running fairly well for very light duties. I heard there is a new BIOS/ rev to make them work better with pfSense but I have not had issues with mine after doing the normal tweaks for Intel NICs (e.g. MBUF).

Supermicro X11SBA-LN4F Review - Sweet!
 

Evan

Well-Known Member
Jan 6, 2016
3,346
598
113
Pfsense says they a good for full 1g throughput.
I don't know with what extra IDS switched on though but at least firewall your good.

Make a span port and throw IDS into a separate VM would be an option depending on your IDS load.
 

Patrick

Administrator
Staff member
Dec 21, 2010
12,507
5,785
113
Pfsense says they a good for full 1g throughput.
I don't know with what extra IDS switched on though but at least firewall your good.

Make a span port and throw IDS into a separate VM would be an option depending on your IDS load.
I would probably look to the 4 core version if you are going to run more IDS.
 

Evan

Well-Known Member
Jan 6, 2016
3,346
598
113
Yeah the 4-core Newgate version comes to ~406 which is s fair bit more, starts to look like the SM boards make a bit more sense.

SM you get full IPMI
Netgate/pfSense you get serial.

On the other hand the netgate is only consuming ~7 watt
 

Evan

Well-Known Member
Jan 6, 2016
3,346
598
113
I use an ERL and a small switch and I just use an AirPort Extreme as my wifi access point.
Simple and works well.
 

Jannis Jacobsen

Active Member
Mar 19, 2016
365
79
28
45
Norway
ERL + R7000 in AP-Mode works like a charm :)
Vpn works perfectly from my iphone as well, so it's all good.
220Mbit+ on wifi, 500Mbit on cabled up and down.

It's all good :)

-J
 
  • Like
Reactions: Evan

jjoyceiv

Member
May 31, 2016
49
1
8
32
Any reason not to use the ASRock J1900D2Y?

ASRock J1900D2Y Mini ITX Server Motherboard LGA 1150 DDR3 1333 / 1066 - Newegg.com

$160ish, decent cpu, dual Intel NICs, and IPMI w/KVM. Perhaps not as quick for VPN as it lacks the crypto acceleration features. The WAN connection is 150/15, which seems doable with this board.
I recommended this board in another thread. You should be able to push 15mbit with the VPN, and otherwise run your link full-speed. Go for it.
 

whitey

Moderator
Jun 30, 2014
2,766
868
113
41

jjoyceiv

Member
May 31, 2016
49
1
8
32
Listing says realtek nics. Just sayin' not a showstopper but the pc-engines APU2 'may' be a better fit w/ 3x Intel i211 nics.
Not quite. ;)



The ASRock Rack website says "Supports Intel Dual GLAN (2 x Intel i210 )"

There's lots of cheaper mITX boards that use Realtek NICs, but I'd never recommend or use one that's not Intell all the way.