I’m Planning on replacing my current router. And instead of buying one, I would get a low powered pc (arm), and install pfSense onto it. However I cannot find any low powered single board PC with two or more Ethernet ports.
So far in a previous post someone recommend the up squared but its not available at the moment.
The Up-board has a couple of issues. First it has no documentation at all, and second it only supports UEFI-bootable media. Currently, the only version of PFSense that supports UEFI is a snapshot of 1.2.4 afaik. Historically PFSense hasn't supported UEFI because it hasn't really needed to.
Here's what I use at the moment.
I got this for $40, put a dual-port Intel NIC (like, $10-20) in it and it runs fine. Runs at about 30W, but that's with an old mechanical hard drive. using a small SSD (we're talkin' one of those small 8-16GB caching SSDs) or flash drive should lower the power consumption considerably.
If you don't mind the price, these are pretty good. I have been running one for a while. The APU ones are amd x86/x64 architecture. I run a small msata drive for pfsense, and i deboxed an SSD and used a banana-pi sata+5v power adapter with it for cache. They are headless, so you need a serial port or SSH to manage it.
most people need a switch not a router,thats why hardware combo modem-router-switch is enough for billions of people.If you need a real router for home use you would spin a vm to determine if you need a real router and you would have known if you needed one.For a lot of people a unmanaged cheap switch does more than expensive crap with 10 anthenas called a router.What do you need router for? how many networks do you run ? even if you needed a router a l3 switch would do its job better than a router. Or do you want to run software packages that can be run better on their own but are included as an downloadable content for router os that you decided to run.
The main reason for building my own router is so that I can manage my network, and allocate addresses to the servers on my network. As well as this I can set-up a new test network which is not connected to my main network. With this new network I can run VM servers, without running out of IP addresses.
I have been looking at some of the pfSense routers on Amazon, The official ones are rather expensive but they are 3rd party ones such as the one I have found below.
Is this a good option or are they any other alternatives.
It would've been a good option, however Netgate announced on the first of May that they will be removing support for all processors that do you not AES-NI extensions in pfSense 2.5 and the Celeron 3215U in that unit does not have AES-NI extensions and wouldn't be able to run pfSense 2.5 when it is released. Its hard to recommend any machine without AES-NI now for pfSense as the usable lifespan of the unit is limited to around two years, reasonably you'd expect the hardware to last much longer than that in this type of application so it wouldn't be a very good investment.
Yes, as long as it has AES-NI it should be fine, I'm using an Athlon 5350 in mine and it works pretty well but not sure if I'd recommend it as its a fairly old architecture and only has 4x PCIe lanes so expansion is limited so it may be a good idea to go for a newer Intel CPU.
Also yes possibly, that i3 has AES-NI so it should work but that unit only has a single RJ45 port and pfSense requires at least two (One for WAN and the other for LAN) so you'll have to either get use a USB3 to Ethernet adapter or a managed switch with VLANs but neither option is ideal. As you've probably guessed by now building a machine for pfSense isn't as easy as it looks because its a very specific appliance and has some hardware limitations.
I recommend finding a free or cheap thin client PC, like a Wyse that has a PCI-E slot. It's x86 and perfect for pfSence.
The thin client PC's are passively cooled, and have weak processor's at 15watt's or under. It's quiet, and don't consume a lot of power, also recycling.
I have a Wyse with some single core amd processor, 1gb of flash memory, 1gb of ram, 1 gigabit Ethernet on-board, and a pci-e 16x expansion slot, I used it as my router for a month, with a USB Ethernet adapter.
I switched back to a standard router, because the USB Ethernet was bottle-necking my speed. I am looking for a cheap PCI-E gigabit Ethernet card before I start using it again.
I think that’s the best option for now, Ill look around and see if I can find a second hand small pc, like the one windell got on his pfSense Build video. If that fails I have mini AXT motherboard and some ram lying around somewhere, so i could just build my own router. thanks for the advice.
I have one of those boards I'm not using..even think I have ram for it. I live in Denmark so shipping shouldn't be that bad. You can have it for free if you pay the shipping fees.