Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Mark Tinka
On 6/Feb/15 05:22, Chuck Mariotti wrote: Thanks… I am leaning that way I think… just trying to wrap my head around if it is worth trying to buy more ram + more storage (HW RAID) to make them ESXI worthy to run VMs, or if I should just keep it basic… the ESXI is tempting since I can at least

Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Walter Parker
If you really want to setup two copies of pfSense, both running on ESXi hosts, using VMWare replication is a very expensive solution. pfSense supports router replication using CARP, so you don't need VM level replication only the data replication in CARP. If VMWare costs are your big issue, you mi

Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Chuck Mariotti
Thanks… I am leaning that way I think… just trying to wrap my head around if it is worth trying to buy more ram + more storage (HW RAID) to make them ESXI worthy to run VMs, or if I should just keep it basic… the ESXI is tempting since I can at least make the secondary server do other stuff inst

Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Jason Whitt
I would add that for "data center" workloads the apu's may not be the best choice ... Those 8 core atoms are plenty for multi 1gig feeds and the nic's are solid. Sent from my iPhone > On Feb 5, 2015, at 12:38 PM, Jeremy Bennett > wrote: > > Jason is correct. Those Supermicro boxes are aweso

Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Jeremy Bennett
Jason is correct. Those Supermicro boxes are awesome. Be careful when ordering though... they want ECC memory. The APUs from Netgate are nice too-the year of bundled support has already saved my bacon a number of times. Well worth the cost. On Thu, Feb 5, 2015 at 9:19 AM, Jason Whitt wrote: > I

Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Jason Whitt
Ive ran as vm's using vmxnet3's as well as physical on these http://m.newegg.com/Product/index?itemnumber=16-101-837 Both are viable options. Jason Sent from my iPhone > On Feb 5, 2015, at 11:11 AM, Walter Parker wrote: > > I've used pfSense in a VM on my ESXi application server. This is mos

Re: [pfSense] RFC: pfSense 2.1-RC1 Feature Request

2015-02-05 Thread Nelson Hallidy
You can edit /usr/local/www/system.php to allow for more DNS servers. I did this on pfsense 2.1.5-RELEASE (amd64) increase the list list($pconfig['dns1'],$pconfig['dns2'],$pconfig['dns3'],$pconfig['dns4'], $pconfig['dns5'],$pconfig['dns6'],$pconfig['dns7'],$pconfig['dns8']) = $config['system']['d

Re: [pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Walter Parker
I've used pfSense in a VM on my ESXi application server. This is mostly to firewall the Windows VMs from the Internet. If you want fail-over, I'd suggest getting one of the new Netgate ( http://store.netgate.com/NetgateAPU2.aspx or http://store.netgate.com/1U-Rack-Mount-Systems-C84.aspx) or pfSens

[pfSense] Firewall Hardware/Setup for Datacenter...

2015-02-05 Thread Chuck Mariotti
Have been using pfSense for years at our datacenter, very happy with it running on old dedicate hardware with failover. The hardware is overdue to be retired and I'm wondering what people are doing/recommending for a datacenter setup. We want to use OpenVPN Server, IDS, dBandwidth, etc... so nee

Re: [pfSense] upgrade 2.1->2.2 experience (serial console on C2758)

2015-02-05 Thread Vick Khera
Found one kind of major problem with OpenVPN roaming clients. On upgrade a new option to choose the topology is present. It is defaulting to the wrong setting (off). None of my clients were able to connect until I set it to one ip per client. I'm assuming that was the way it was with 2.1. I thi