Check out http://soekris.com/. I have a low end one and it works great. Little costly though.
Justin Mayes -----Original Message----- From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Chris McGee Sent: Thursday, November 15, 2012 3:48 PM To: misc@openbsd.org Subject: Hardware hunting Hi guys- I am hunting for a low-power firewall for my home network. For at least 10 years, whenever my firewall hardware has started to die, I've grabbed a decommissioned game PC, added a few NIC's, and put OpenBSD on it. The firewall's current incarnation pulls about 160 watts 24/7; I'd like to lower that by a lot. Requirements are: 1) Low power (<50w; I want it to pay for itself before the hardware dies) 2) 4 network interfaces (3 gigabit, one gigabit or 100mbps) 3) Cheaper is better (e.g., a $200 4-port PCIE NIC on a $75 motherboard is suboptimal) 4) Works with OpenBSD 5.2 5) Won't cause a hardware bottleneck when pushing 200mbps of multidirectional traffic through a moderately complex pf ruleset (this doesn't take a lot of CPU; a 1 GHz Athlon runs at about 2% under load, and most of that is from hardware interrupts). It looks like a lot of people use the Alix 2D13 for this, but I rejected it for poor throughput (it would be great for the internet connection, but it sounds like it might be a serious bottleneck between the internal networks). Jetway makes a number of promising-looking Atom boards, including the 4-interface NF38, but the NF38 and many other JetWays use the Realtek RTL8111EVL, which doesn't appear to be OpenBSD-friendly. You can add interfaces to Jetway boards via their daughterboards, but those are either Realtek RTL8111F or Intel 82574L; same problem. (Google turns up one report of the RTL8111 series sorta working with -current, but if you read the guy's dmesg, it doesn't look like he HAS an RTL8111 in the first place.) ...anyway, if you have a low-power OpenBSD network appliance with 3-4 interfaces that you're happy with, please give me a yell. I've been through a lot of boards without finding a winner so far! [demime 1.01d removed an attachment of type application/pkcs7-signature which had a name of smime.p7s]
