On Thu, Nov 15, 2012 at 04:47:53PM -0500, Chris McGee wrote: > Hi guys- > > I am hunting for a low-power firewall for my home network. For at least > 10 years, whenever my firewall hardware has started to die, I've grabbed a > decommissioned game PC, added a few NIC's, and put OpenBSD on it. The > firewall's current incarnation pulls about 160 watts 24/7; I'd like to > lower that by a lot. > > Requirements are: > 1) Low power (<50w; I want it to pay for itself before the hardware dies) > 2) 4 network interfaces (3 gigabit, one gigabit or 100mbps) > 3) Cheaper is better (e.g., a $200 4-port PCIE NIC on a $75 motherboard > is suboptimal) > 4) Works with OpenBSD 5.2 > 5) Won't cause a hardware bottleneck when pushing 200mbps of > multidirectional traffic through a moderately complex pf ruleset (this > doesn't take a lot of CPU; a 1 GHz Athlon runs at about 2% under load, and > most of that is from hardware interrupts). > > It looks like a lot of people use the Alix 2D13 for this, but I rejected > it for poor throughput (it would be great for the internet connection, but > it sounds like it might be a serious bottleneck between the internal > networks). > > Jetway makes a number of promising-looking Atom boards, including the > 4-interface NF38, but the NF38 and many other JetWays use the Realtek > RTL8111EVL, which doesn't appear to be OpenBSD-friendly. You can add > interfaces to Jetway boards via their daughterboards, but those are either > Realtek RTL8111F or Intel 82574L; same problem. (Google turns up one > report of the RTL8111 series sorta working with -current, but if you read > the guy's dmesg, it doesn't look like he HAS an RTL8111 in the first place.) > > > ...anyway, if you have a low-power OpenBSD network appliance with 3-4 > interfaces that you're happy with, please give me a yell. I've been through > a lot of boards without finding a winner so far! >
Hi, At work, i'm using a bytemine appliance: http://blog.bytemine.net/2012/08/15/bytemine-appliance-6a16e/ https://shop.bytemine.net/startseitenprodukte/bytemine-appliance-6a16e.html Works very fine. -- Pierre-Emmanuel André <pea at raveland.org> GPG key: 0x7AE329DC
