The pfSense Store

Author Topic: Will this Mini-ITX box cut it?  (Read 317 times)

0 Members and 1 Guest are viewing this topic.

Offline cpcnw

  • Newbie
  • *
  • Posts: 10
  • Karma: +2/-0
    • View Profile
Will this Mini-ITX box cut it?
« on: May 19, 2017, 01:23:58 pm »
Hardware list
Intel® Desktop Board D510MO [https://goo.gl/AyujPA]
Intel PRO/1000 MT Desktop Adapter
4GB RAM

Scenario
Network with 35 clients
Want to add some UTM functions of pfsense to network

Any advice appreciated [especially on UTM setups]

Offline DeLorean

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +13/-0
    • View Profile
Re: Will this Mini-ITX box cut it?
« Reply #1 on: May 19, 2017, 04:54:21 pm »
This is a budget friendly motherboard and is a good choice for a small network,
without all the whistles and bells.
But in my opinion, the Intel Atom D510 is not very suitable for UTM purposes.
For UTM purposes i recommend a Quad Core cpu like the Intel Celeron J1900 at least.
But keep in mind, in the near future pfSense (2.5) will only run on a cpu which support AES-NI.
So if you want a firewall for many years, its recommended to choose now for a setup that supports AES-NI.
The Intel Celeron J1900 doesn't support also AES-NI, so your setup will now have a higher pricelabel if you want
to be prepared for the future.


Grtz
DeLorean
« Last Edit: May 19, 2017, 06:15:22 pm by DeLorean »

Offline cpcnw

  • Newbie
  • *
  • Posts: 10
  • Karma: +2/-0
    • View Profile
Re: Will this Mini-ITX box cut it?
« Reply #2 on: May 19, 2017, 05:07:13 pm »
DL - I am really glad you brought that up as I knew nothing about this;

https://www.youtube.com/watch?v=C5ELmTb3wzg

what is a good economy board / cpu combo to look out for?

Offline DeLorean

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +13/-0
    • View Profile
Re: Will this Mini-ITX box cut it?
« Reply #3 on: May 19, 2017, 06:08:17 pm »
DL - I am really glad you brought that up as I knew nothing about this;

https://www.youtube.com/watch?v=C5ELmTb3wzg

what is a good economy board / cpu combo to look out for?

Asrock QC5000M motherboard.
This motherboard has a embedded A4-5000 Quad-Core Cpu @ 1.55Ghz and supports AES-NI,
and this motherboard is also fanless, and has multiple PCI-E slots so that the throughput is higher
then a Intel D510MO which has only a PCI slot.

With the Intel D510MO measured between the onboard NIC and 1 of the 2 Gigabit Ports of the Intel NIC, you will reach a maximum
throughput arround 500a550Mbps, and arround 200a220Mbps between the 2Gigabit Ports of the Intel NIC.
 
While with a PCI-E Intel Dual or Quad Gigabit card, you will reach between the onboard and 1 of the Gigabit Ports of the Intel NIC a speed of 800a1000Mbps,
and between the Gigabit ports of the Dual or Quad a speed arround 500a600Mbps.

I have build a few firewalls with the Asrock QC5000M and i'm very satisfied about the performance of this board.

Grtz
DeLorean


« Last Edit: May 19, 2017, 06:23:15 pm by DeLorean »

Offline cpcnw

  • Newbie
  • *
  • Posts: 10
  • Karma: +2/-0
    • View Profile
Re: Will this Mini-ITX box cut it?
« Reply #4 on: May 20, 2017, 06:18:10 am »
Tnx DL - any recommends for Gb Nic's ?

Offline DeLorean

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +13/-0
    • View Profile
Re: Will this Mini-ITX box cut it?
« Reply #5 on: May 20, 2017, 06:38:56 am »
Tnx DL - any recommends for Gb Nic's ?

I always use the Dual or Quad from Intel.
If search at Ebay for a Quad Gigabit card, look for the cards with the big blank aluminium heatsink.
This type works great with pfSense.
The Quad Gigabit cards with the black heatsink, are sometimes knockoff's from te real, and can cause problems
with recognizing in pfSense.

Grtz
DeLorean