Netgate (PfSense) appliances

[bdt]

Yep, I think that's the company I emailed - need one with more ports and while they could import them they'll probably end up being way too expensive.

Hear you, like going from USD170 (yes, on a special and there's shipping, but still) to ZAR5800 (and that down from ZAR6500!), which just comes off as straight up rapacious gouging. But this wee beastie goes for USD149, so ~ ZAR2000 and RED are touting ZAR2490 which, I submit, is entirely reasonable; and specially so against that kind of gouging ...so just maybe these guys may be decent about it?

Still, this is all academic; my point here is only to highlight that it's worth checking.

 

[Gnome]

Interesting, that device is ARM based. But when I look at the PfSense web-site, they only offer AMD64 and Netgate ADI.

Obviously ARM PfSense is possible, but at this point they aren't bothering for anyone but Netgate devices.

That said, it should be possible for a Orange Pi type device to run PfSense, theoretically speaking. And assuming you get some decent Ethernet drivers, which with Orange Pi hardware is a long shot typically. They typically just use the absolute cheapest hardware which means garbage drivers.

Still I'm curious how solid that Netgate ARM device is.

 

[gfmalan]

Interesting, that device is ARM based. But when I look at the PfSense web-site, they only offer AMD64 and Netgate ADI.

Obviously ARM PfSense is possible, but at this point they aren't bothering for anyone but Netgate devices.

That said, it should be possible for a Orange Pi type device to run PfSense, theoretically speaking. And assuming you get some decent Ethernet drivers, which with Orange Pi hardware is a long shot typically. They typically just use the absolute cheapest hardware which means garbage drivers.

Still I'm curious how solid that Netgate ARM device is.

I’m running pfSense on Raspberry PI 2, using VLANs and a switch to create WAN, LAN and DMZ.

Small solution!

 

[DeathStrike]

I’m running pfSense on Raspberry PI 2, using VLANs and a switch to create WAN, LAN and DMZ.

Small solution!

would like to hear more about this. how is the performance?

I have a pi3

 

[Mr Scratch]

would like to hear more about this. how is the performance?

I have a pi3

You’d be limited to 100Mbs ports, but it works well enough for that.

 

[gfmalan]

would like to hear more about this. how is the performance?

I have a pi3

What Waylander said.

I did it as a test(how to get the smallest solution for a up to 20mb VDSL), work great on my 8mb ADSL, but screw up my speed on my 100/100 fibre, for that I use my 4port micro ITX pc.

When you enable Squid, and have 8 VPN tunnels, the PI suffer.
For remote site monitoring an dual WAN, it work great. LTE dongle and ADSL with 1 VPN for monitoring traffic only, and the rest just NATted.

Clients mostly have 4-10mb ADSL

 

[DeathStrike]

thanks. sounds like a temporary replacement for my box. my box is dying and don't have budget to fix now. currently running off normal router which is annoying.

 

[infscrtyrisk]

You can use a USB --> ethernet device on the Raspberry as well (if you're old school like me ).

Also check out Manuel's doc at the SANS reading room for inspiration: https://www.sans.org/reading-room/whitepapers/hsoffice/securing-home-iot-network-37717

 

[Gnome]

I’m running pfSense on Raspberry PI 2, using VLANs and a switch to create WAN, LAN and DMZ.

Small solution!

Switches that support setting a port to a specific VLAN are pretty cheap these days.
(When I was in the US recently I picked up one of these for just over R300 which does support VLANs)

Can be a pretty decent low cost solution.

I do know the RPI is quite limited BW wise on that ethernet port.
The Orange Pi does offer some GbE devices, just not sure how great the support is for those.

 

[DrJohnZoidberg]

I decided to bite the bullet and just get one of these: http://www.ebay.com/itm/Quad-Core-f...hash=item3f86e21523:m:myt6-3Nye0tdQvg9xIjvVKQ

Works out cheaper than building a similar mini-itx system plus it uses less power and is just overall less hassle. The unit price worked out @ R3350 and the shipping and import duties were R1025, wish shipping wasn't so much but it's less hassle and worry knowing it's priority shipping and they handle the import duties also like the Amazon Global Shipping option.

My current box is on the way out and is constantly freezing up. I'll update this thread once I get the unit and let you guys know what it's like.

My Ebay box got delivered a bit earlier. So far so good, just plug and play. Came pre-installed with pfSense, I'm now just updating to the latest version.

I should have got one of these things ages ago, so nice and compact. I'll run a few more tests later but need to get things up and running so I can actually get work done.

 

[infscrtyrisk]

Thank you DrJohnZoidberg, looking forward to a more comprehensive review when you have capacity.

 

[Thor]

Do we have a local supplier yet?