Need recommendations for new PFSense router

[jagdtigger]

Hi all.

 

So in light of this latest scandal around routers (VPNFilter) i think its about time to retire my netgear router(fvs336g, software updates ended in 2017 sptember...). Which would be better, build my own or buy one of their prebuilts?

 

Thanks in advance for the help.

[jlcald839]

Depends if you have the time and parts to build one yourself. If you don’t have time I say get a prebuilt.

[Mikensan]

To future proof make sure whichever you get supports AES-NI, since pfsense 2.3 will require it.

[ltguy]

5 hours ago, Mikensan said:

To future proof make sure whichever you get supports AES-NI, since pfsense 2.3 will require it.

*pfsense 2.5 will require it

[ltguy]

I don't object to buying a prebuilt if you don't have old parts laying around, but i would never buy their prebuilts. They are under powered and super expensive. Just go on ebay and get a used dell or something (sandy bridge or higher) and add a dual or quad port intel nic.

 

If power is really a concern you get can a new mini pc like these:

 

https://www.amazon.com/Firewall-Micro-Appliance-Gigabit-Barebone/dp/B01KLECNDG/ref=sr_1_4?s=electronics&ie=UTF8&qid=1527270611&sr=1-4&keywords=dual+lan+mini+pc

 

https://www.amazon.com/XCY-Celeron-Supporting-Ethernet-Firewall/dp/B0719L1VFK/ref=sr_1_5?s=electronics&ie=UTF8&qid=1527270611&sr=1-5&keywords=dual+lan+mini+pc

 

https://www.amazon.com/ZOTAC-Fan-less-Quad-Core-Performance-ZBOX-CI327NANO-U/dp/B0728F8JS5/ref=sr_1_3?s=electronics&ie=UTF8&qid=1527270611&sr=1-3&keywords=dual+lan+mini+pc

 

Im using a i3 4gb thinkserver for my pfsense rig right now and its gross overkill.

 

Go cheap if you must... but not on the network cards. At least get a intel pro/1000 pt or better.

 

https://www.amazon.com/Intel-1000-Dual-Server-Adapter/dp/B000BMZHX2/ref=sr_1_3?s=electronics&ie=UTF8&qid=1527270837&sr=1-3&keywords=intel+dual+nic

[jagdtigger]

So their prebuilts arent that good, then i guess i have no choice but to build one... Oh well, at least i can retire the RPI running my openvpn server...

 

/EDIT

Okay, i think i go overboard and build it with a r3 ryzen, the mobo almost as much as the intel  alternative so why not?

Edited May 25, 2018 by jagdtigger

[MysticalGnome]

Another low power (5 watts) option could be the PC Engines APU 3 B4 it's a great board which has 3 Intel NICS on it and 3 mini pcie slots, one of them doubles as a msata slot for your OS.
It also has two sim slots for LTE. Only downside is that it has no video output so it is strictly terminal and serial connectivity.

[jagdtigger]

1 hour ago, MysticalGnome said:

Another low power (5 watts) option could be the PC Engines APU 3 B4 it's a great board which has 3 Intel NICS on it and 3 mini pcie slots, one of them doubles as a msata slot for your OS.
It also has two sim slots for LTE. Only downside is that it has no video output so it is strictly terminal and serial connectivity.

From their site:

Quote

we do not sell to end users in EU countries

 

Oh well, i dont think the r3 would use that much power, i mean my server PC is rocking a 1700X and it idle's at about 60W......

[MysticalGnome]

You can buy them no problem, like here.

There are multiple models available with 2 or 4 GB of RAM, the APU4 seems to be the latest iteration.

There is also a case available for this board in multiple colors for a few euros.

[jagdtigger]

Nice, i hope they ship to Hungary too... Thanks for the help . I think im gonna stick to the ones in stock currently, that is a APU.3B2, it should be enough considering the CPU inside my current one clocks at 500MHz...

Edited May 26, 2018 by jagdtigger