Hardware recommendations for Linux firewall distros

[mic_y]

im using an old P4 1.4GHz single core box, 768MB RAM, that I had lying around for pfSense. Currently running basic QoS and nothing else on the server, with about 10 permanent clients on the network, and consistent guest usage (up to an additional 10 devices).

Besides my adventures with a crappy onboard VIA NIC that would detect but did not actually work, all has been running really smoothly and I am in love with pfSense.

Now I just need to figure out the squid cache and antivirus modules, but that is taking a bit of a back seat at the moment.

 

[stephannel77]

You can never go wring with pfsense. You'll be able to run squid easily but think might up your cpu with clamav installed as well.

 

[DrJohnZoidberg]

I went all out with our small office and got one of these: http://www.supermicro.com/products/system/1U/5018/SYS-5018A-FTN4.cfm

Runs pfSense like a beast.

Not cheap though.

 

[stephannel77]

I went all out with our small office and got one of these: http://www.supermicro.com/products/system/1U/5018/SYS-5018A-FTN4.cfm

Runs pfSense like a beast.

Not cheap though.

If I may ask, what did it cost you? Looks promising

 

[DrJohnZoidberg]

If I may ask, what did it cost you? Looks promising

Total cost was about R10,500 including a 4GB ECC SO-DIMM and an 80GB Intel SSD.

The server itself cost R8,500 when I bought it in October last year.

It's a popular choice for a network appliance, there's a thread over at the pfSense forums on getting started: https://forum.pfsense.org/index.php?topic=75015.0

 

[stephannel77]

That is quite expensive. Never the less the DNA1120 is slightly cheaper.

Running an 6year old dual xeon at client with ipfire. Core functions is caching and content filtering. But heavy on power.

 

[DrJohnZoidberg]

That is quite expensive. Never the less the DNA1120 is slightly cheaper.

Running an 6year old dual xeon at client with ipfire. Core functions is caching and content filtering. But heavy on power.

One of the main reasons I went with a low powered option. We had pfSense running on an old desktop box but not your friend during load shedding. Our network stack at the office can now last an entire load shedding session on UPS power if needed.