Which setup suits you better: Consumer FW&Router or pfSense?
Which setup suits you better: Consumer FW&Router or pfSense?
I am relocating next month into a new apartment with a 1/1 Gbit/s fiber connection. By default it includes one RJ45 port and the main router assigns an IP address to that port. My goal is to set up my own network, which means I’ll need NAT functionality. The current setup offers only 15 Mbps download and 1 Mbps upload. My Juniper SSG5 works adequately for these speeds, but its ports are limited to 10/100 Mbps, and the firewall’s max throughput is capped at 160 Mbps. I’m considering a replacement router and firewall. Should I look into consumer models or a custom-built pfSense solution? I’m interested in networking and prefer professional gear over typical consumer devices, which often lack flexibility. Although some consumer options are capable, they usually don’t support advanced experimentation. High-end equipment for gigabit speeds is significantly more expensive (if you know of any alternatives, please suggest). For running pfSense at gigabit speeds, I’d need a powerful machine—something basic with no QoS requirements.
You can disable wireless directly in pfSense without needing a separate WLAN AP.
pfSense offers a great experience with more capabilities than any typical consumer router. If you're serious about it, invest the time and budget. A custom build will cost more, but you can find affordable options on eBay for older CPUs or newer Pentiums. For top performance, especially with VPNs or gigabit speeds over a VPN, you may need an i3 or similar. Think ahead about your needs—VPN, plugins, traffic control, QoS. It could be pricier and harder to upgrade later, but depends on your plans. For wireless, an access point is essential; PCI-E/USB cards aren’t reliable. Quality APs from brands like Ubiquiti are excellent choices. Also, ensure you have a proper network card—HP NC364T or Intel options are solid, but beware of fake listings on eBay. The HP/Dell and some OEM models are often rebranded Intel products, so stick to Intel only. For more insights, check the r/PFSENSE subreddit. If you're setting up a home lab, consider using an old server in a VM for pfSense alongside other services. Just remember: if the server goes down, your entire network stops working. At least the external connection remains functional.