Configure PFSense or OPNsense setup
Configure PFSense or OPNsense setup
For future-proofing your setup toward PCIe 4.0, consider a high-quality 4-port network card. Recommended options include genuine 4-port cards with Gigabit speeds such as the i350-t4v2 or Intel Pro 1000 series. You can find trusted listings at sites like Newegg or Amazon. Since PFSense/OPNSense likely won’t support Realtek, ensure your hardware is compatible with modern standards.
This setup will primarily function as a VPN server. The Gen 4 SSD ensures rapid startup and improved caching performance. My choice of the Gen 4 SSD was mainly for the ability to save configuration changes by rebooting after updates.
Based on what I’ve seen, your specs (i5-7200U) should comfortably meet the requirements for Gigabit OpenVPN. Going below an 8th generation i3 seems unnecessary. It’s clear PCIe4 isn’t needed at all—FreeBSD can easily support 10Gbps without any issues.
I've never noticed a big change in startup between any SSDs. They're mostly CPU-driven and OS setup, not storage-related. Caching is becoming less useful now—most sites are only accessible via HTTPS, which forces extra security measures. These tricks can make it hard to confirm you're connecting securely.
I'm storing temporary data. Your experience shows web caching offers limited benefit, especially with gigabit connections. A Gen 4 SSD won't perform significantly better than a standard SATA SSD, and I can find two more affordable SATA options there.
I considered storing updates for Windows, since I have 11 machines, but think Gigabit could be better. I’m aiming for a router that lasts about 15 to 20 years. I know I might need to replace the network card later. For a 10 gigabit RJ45 with four ports, what do you suggest?
It doesn't seem feasible to implement that on PFSense or OPNsense, unfortunately.
I believe it's a Squid proxy setup. For a router, I’d suggest PFSense, OPNsense, or Windows Server 2019. You already have a genuine Windows Server 2019 copy.
I wouldn't bother with Windows update caching. The system should already fetch updates from other devices on the network, and with a strong connection the cache will match internet speed. The Windows server acts more like a router, which isn't ideal. I'd prefer something like Untangle if you're looking for an alternative.