Router Mainboard for pfSense
Router Mainboard for pfSense
I thought I was taking it too far with an i5-7200U on a connection under 100Mbit! (It should handle much more than a Gigabit link based on other users' experiences, though I run several OpenVPN clients myself) Honestly, nothing is truly 10Gb yet—pfSense can't manage it yet. I think pfSense 2.5 should solve the issue, but you're probably expecting a very powerful processor to make it work. Think about it logically: if you can push Gigabit at around 15W, you might need about 150W just to support 10Gb. The cost of electricity between now and when you actually require 10Gb could easily offset the investment for a more efficient router later, especially once high-speed broadband becomes common. You're also uncertain if the hardware will still work then.
I came across this solution while looking for a comparable answer that the original poster was seeking. Here’s my perspective, in case it assists the next peer I was thinking about. The Supermicro X10SDV series Pentium D-1508 with two cores and four threads (a rebranded version of the Xeon D) and 10 gigabit NICs is well-suited for future-proofing a new 1U pfSense router. With remote work increasing and high-speed fiber becoming more common in city areas, this approach makes sense. To understand the capabilities of a two-core processor in pfSense, I checked Netgate’s appliance listings where they share IPERF and IMIX test results. The Pentium D-1508 sits between their SG-3100 (ARM 2 cores) and SG-5100 (Atom 4 cores), which suggests around 1.5 Gbps for firewall traffic and 350 Mbps for IPSec VPN using the IMIX chart—a more realistic scenario. So, to address the original question, the Pentium D-1508 paired with pfSense 2.4 likely won’t meet needs on a 10 gigabit connection. The Xeon D-1518 35W appears to be the optimal choice for a firewall device. With upcoming pfSense 2.5 improvements, this CPU could handle traffic above 2 gigabits. Key points to note: Intel’s D15x8 chips are built for edge networking and should outperform other dual-core options due to QuickAssist acceleration. Source: https://www.anandtech.com/show/11152/int...-gbe-ports Side note: I first tried the 4-core 45W variant Xeon D-1521, which overheats easily. It requires strong cooling and isn’t ideal for a 1U case or typical home environments.
I concur that Xeon SOC models are likely the optimal choice for you. Your specific goals will shape the necessary hardware specs. The brief guidance provided will be useful mainly for IPSEC and data compression tasks. You’ll require a 10G multiport switch with base technology. Plan your switch placement accordingly. Trying to handle everything on the router is a common error among users accustomed to consumer gear where routing and Wi-Fi features are combined. If you aim to remain adaptable, adopt an enterprise approach and design your architecture thoughtfully. Should you need separate internal network zones, position them on a dedicated router positioned beyond your network perimeter. This setup enables high-speed routing without relying on session tables. You can then inspect traffic at the network edge using tools like pfSense. This method ensures your investment pays off by focusing resources where they matter most. Investing heavily in a Xeon router until FTTH becomes widespread won’t deliver value. Instead, prioritize building your core infrastructure first—especially with future-proofing in mind. Once next-gen connectivity arrives, you can upgrade to a high-performance border router. This phased strategy maximizes potential for 10G routing on standard processors and accounts for future upgrades.
So there is another option. From the folks who bring you pfSense, is their TNSR project/product. Recently made free for HOME/Personal use. https://docs.netgate.com/tnsr/en/latest/...index.html The stated goal of this project is to achieve 10G and beyond on server grade off the shelf hardware. If you have the chops, then one of those SuperMicro Xeon Boards and an Intel X-5xx network adapter should get you there. But again.... I wouldnt worry about the border. Concentrate on your core.