PFsense Hardware

[FN-GM]

Hello,

 

I was wondering if anyone can recommend some hardware to run PFsense please? I would like it to be rackmount and around 1U. Ideally brand new. It won't be under a big load, will be doing site to site VPN and another doing some basic firewalling on a small network.

 

Thanks

[Steve21]

You considered one of the official ones? Or did you want something cheap cheap?

 

https://www.pfsense.org/products/

 

Steve

[FN-GM]

Hello,

 

I should have said, I had considered them but it will be around £650 for a basic rackmount unit. I was wondering if someone knew something that was better value.

 

Thanks

[Steve21]

APU2C4 is one of the standard go-to's for cheaper stuff, but not tried them in a while so might want to check they're still supported

 

Think netgate made a few small ones too

 

Steve

[FN-GM]

I think i can get units that have been re-built, ideally something I wouldn't need to build myself, I don't have the time Edited December 19, 2017 by FN-GM

[Steve21]

Watchguard's are another common one. They can be flashed with pfsense, but the hardware is all done etc. (Need to be careful as certain models can't run it though). If you're happy with ebay jobby.

 

But if you want new, already built, you'll be paying generally

 

But tbh for what you want have you considered something like EdgeRouter-X?

 

Steve

[bald_pig]

Someone say cheap?

 

[Steve21]

I wouldn't get that from 2.5 pfsense stops supporting non-AES-NI processors unless they changed their timelines

 

The 2.5 release which should be earlier 2018 would break them if it's still happening

 

https://www.netgate.com/blog/pfsense-2-5-and-aes-ni.html

 

Steve

[MatthewL]

What did you end up choosing for this?

 

I've just setup pfSense at home on an old PC but want want something a bit smaller to put in my rack.

[FN-GM]

Nothing as yet. Still open to ideas.

[MatthewL]

I'm yet to find anything either but a MicroTik router board seems to be best option (LinITX seem to be best place I can find in the UK). There are some pre built things out there but I don't think I could trust the source with especially what it is going to be used for.

 

I have seen a few in virtual setups but with it been a firewall I prefer a separate device physically away from my servers. I want something with multiple ports on but cannot find anything to fit my bill yet.

[newpersn]

I use an old Dell Tower (by old P4 and 1GB DDR2 (yep later P4) and it works fine on our work backup feed.

 

Fitted an extra nic and away it goes.

[FN-GM]

You need to make sure you get a CPU that supports AES-NI or you won't be able to upgrade to 2.5.

[newpersn]

You need to make sure you get a CPU that supports AES-NI or you won't be able to upgrade to 2.5.

 

Will have to wait till i upgrade some computers. (2nd gen i3 dosent support AES-NI) I got some 4th gen i3 but will have to wait till around Easter to swap them out.

[ih_aswc]

We've used the PC Engines APU2C4 with pfSense on client sites that have basic requirements and don't need loads of throughput (i.e. up to 100Mbps). Happy to recommend them - haven't had any problems so far.

 

https://linitx.com/product/linitx-apu2-c4-4gb-3nicusbrtc-rackmount-pfsense-msata-firewall-kit/14241

 

The APU2 is based around the AMD GX-412TC which has AES-NI support so should fully support pfSense 2.5.

 

Bear in mind these don't have a modem included, so if your broadband is ADSL/VDSL (or presented as anything other than Ethernet) a separate modem will be required.

[Geoff]

My pfSense boxes are recycled Citrix CAGs. Do you have any 'old' kit you can repurpose?

[andy2017]

Sophos UTM 220 or above, check on ebay, you can pick one up real cheap if you're lucky.