Re: [pfSense] Configs or hardware?

2018-02-15 Thread Eric W
Also, this is an incredibly common question on the pfSense forums. (Not trying 
to be condescending, just stating.) I racked my mind trying to figure something 
out when, like you said, it’s a solved problem. Basically, get a reasonably 
powered computer and put some real  Intel NICs in it and you’ll likely be fine. 
The processor you get will be decided based on what packages you’re running. My 
i7 is overkill, but it was also free. 

Sent from Der Isenphonen

> On Feb 15, 2018, at 9:28 AM, Eero Volotinen  wrote:
> 
> Hi,
> 
> This hardware can do gigabit (wirespeed) NAT/FW
> 
> https://www.amazon.com/gp/product/B016VHBA7C (tested on my home, using
> symmetric gigabit line...)
> 
> but, I we use NetGate SG-8860 on our main offices:
> 
> https://www.voleatech.de/en/product/sg-8860-1u/?gclid=EAIaIQobChMIlbTj5o-o2QIVBJ8bCh1phgmKEAAYASAAEgKuzPD_BwE
> 
> Eero
> 
> On Thu, Feb 15, 2018 at 4:14 PM, Michael Munger > wrote:
> 
>> TL; DR.
>> 
>> On 1Gbps downloads, our pfSense firewalls are performing poorly with
>> speed tests of ~400Mbps. It's either pfSense configs (not likely) or the
>> hardware (more likely). I do not want to buy a commercial box. For our
>> corporate network, we use HP DL360s, so zero problem there.I need
>> something that is the size of a router, but can do 1Gbps with pfSense.
>> 
>> Who's got working configs / hardware combos that do 1Gbps easily?
>> 
>> Background.
>> 
>> I've been using Alix boards (APU1D4 as of late). The problem is: these
>> boards seem to top out at 400Mbps download. I have several clients who
>> have gigabit fiber connections, and they have been complaining to the
>> ISP that their service is slow. When they connect to the modem directly,
>> they get 1G download. When they go through the pfSense firewall we put
>> together using these Alix boards from PC engines, it drops to ~400Mbps.
>> 
>> There are several competing "router boards" (Microtik and the like), but
>> I have zero experience with them, I don't know if they will run pfSense
>> or if they will do the speed. The Alix + pfSense combo has been GREAT
>> for many years. If I change to something else, I don't want to go
>> through growing pains since I figure this is a solved problem, and
>> someone on this list knows / has a recommendation.
>> 
>> --
>> Michael Munger, dCAP, MCPS, MCNPS, MBSS
>> High Powered Help, Inc.
>> Microsoft Certified Professional
>> Microsoft Certified Small Business Specialist
>> Digium Certified Asterisk Professional
>> mich...@highpoweredhelp.com 
>> ___
>> pfSense mailing list
>> https://lists.pfsense.org/mailman/listinfo/list
>> Support the project with Gold! https://pfsense.org/gold
>> 
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] Configs or hardware?

2018-02-15 Thread Eric W
I have an optiplex 970 (possibly 980, don’t recall) with 16GB RAM and a quad 
port Intel NIC that handles gigabit fiber with no issues at all. I managed to 
order a knockoff NIC (half the thing’s from eBay), so I’m surprised it’s 
performing this well, but it’s been rock solid. Granted it’s for home use, but 
my TV and phones are all handled via my network connection and I’ve had no 
issues and for things like that, it would be noticeable. 

Sent from Der Isenphonen

> On Feb 15, 2018, at 9:28 AM, Eero Volotinen  wrote:
> 
> Hi,
> 
> This hardware can do gigabit (wirespeed) NAT/FW
> 
> https://www.amazon.com/gp/product/B016VHBA7C (tested on my home, using
> symmetric gigabit line...)
> 
> but, I we use NetGate SG-8860 on our main offices:
> 
> https://www.voleatech.de/en/product/sg-8860-1u/?gclid=EAIaIQobChMIlbTj5o-o2QIVBJ8bCh1phgmKEAAYASAAEgKuzPD_BwE
> 
> Eero
> 
> On Thu, Feb 15, 2018 at 4:14 PM, Michael Munger > wrote:
> 
>> TL; DR.
>> 
>> On 1Gbps downloads, our pfSense firewalls are performing poorly with
>> speed tests of ~400Mbps. It's either pfSense configs (not likely) or the
>> hardware (more likely). I do not want to buy a commercial box. For our
>> corporate network, we use HP DL360s, so zero problem there.I need
>> something that is the size of a router, but can do 1Gbps with pfSense.
>> 
>> Who's got working configs / hardware combos that do 1Gbps easily?
>> 
>> Background.
>> 
>> I've been using Alix boards (APU1D4 as of late). The problem is: these
>> boards seem to top out at 400Mbps download. I have several clients who
>> have gigabit fiber connections, and they have been complaining to the
>> ISP that their service is slow. When they connect to the modem directly,
>> they get 1G download. When they go through the pfSense firewall we put
>> together using these Alix boards from PC engines, it drops to ~400Mbps.
>> 
>> There are several competing "router boards" (Microtik and the like), but
>> I have zero experience with them, I don't know if they will run pfSense
>> or if they will do the speed. The Alix + pfSense combo has been GREAT
>> for many years. If I change to something else, I don't want to go
>> through growing pains since I figure this is a solved problem, and
>> someone on this list knows / has a recommendation.
>> 
>> --
>> Michael Munger, dCAP, MCPS, MCNPS, MBSS
>> High Powered Help, Inc.
>> Microsoft Certified Professional
>> Microsoft Certified Small Business Specialist
>> Digium Certified Asterisk Professional
>> mich...@highpoweredhelp.com 
>> ___
>> pfSense mailing list
>> https://lists.pfsense.org/mailman/listinfo/list
>> Support the project with Gold! https://pfsense.org/gold
>> 
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold