3 ms·
>So having enough beef to push 1 gigabit NICs is good but planning for the future and adding 2.5 gb or higher is better. I'm using I5-2500K's for firewalls. 1
by Daho0n 6y ago
>So having enough beef to push 1 gigabit NICs is good but planning for the future and adding 2.5 gb or higher is better.
I'm using I5-2500K's for firewalls. 1 gigabit hardly moves the CPU usage. I have all NIC offload turned off.
Btw. I would really consider OPNsense instead if you are building custom firewalls. Pfsense is an atrocious company. Trying to kill off OPNsense by buying domains that tell lies and AFAIK no one outside Netgate can actually build from source. They are not open source even though they claim so. They are also moving to using DRM.
https://github.com/rapi3/pfsense-is-closed-source https://github.com/rapi3/pfsense-is-closed-source
- technofiend 6y agoThanks for the pointer to OPNSense! I've been drag racing various operating systems after my little protectli box proved only capable of pushing 500Mbit/s using PFSense + FreeBSD. Even the usual TCP tuning tricks didn't help. Meanwhile every OS I've tried except OpenBSD proved able to saturate a dedicated one gigabit link in a VM under ESXi. I will definitely try OPNsense next!