Tech / Special Interest → PC Hardware Discussion/Reviews > Help me pick a new system for a pfsense firewall

Help me pick a new system for a pfsense firewall

I want to build a new firewall to replace the bulky 4U custom built computer I'm using now (will re-purpose the internals of the old system to another use).

I do have a rack I can mount a server in but I am also looking at a small NUC (or similar) device that could sit behind my monitors out of sight on my desk.

Here's what I'm looking at:

ASUS RS100-X7 combo with i3-2120t and 2x 2GB RAM - $384.96
Intel NUC i3-3217u combo with 120GB SSD and 4GB RAM - $400.97
Intel NUC Celeron 847 combo with 120GB SSD and 4GB RAM - $275.97

Can the ASUS server run with non-ecc memory? If so I can likely save some money there. I believe I should be OK on CPU frequency with the Celeron 847 being down at 1.1 GHz. Similar Atom processors can handle much more than I'll throw at this thing and the Celeron should be better than the Atom. The i3 chips would be overkill but are more of an apples-to-apples comparison.

I like the better expandability of the ASUS server and power isn't really an issue, but size kinda is. I don't like planning for "what-if" future scenarios, especially when they have a tendency to never play out but at the same time I'd like to not be "maxed out" right off the bat either. The NUC isn't likely to let me expand much beyond what it is now but it will serve my needs just fine right now.

I also know the NUC includes an SSD but the ASUS server has no drive at all. I intend to utilize one of my many 3.5" HDDs I have around for the system (likely the HDD currently in the 4U server). That does mean I kinda get more for my money with the NUC but I only need it in the NUC so that doesn't seem like a fair comparison really.

I'd like to spend no more than about $500 on this and really would prefer the chepie Celeron system unless someone talks me out of it.

There's a $6-7 difference in price between the cheapest regular and ECC 2 GB sticks on Newegg, $3 if limited to Kingston. At that point, you might as well go with it.

I don't see why the Celeron wouldn't work. I guess it would depend on the desired throughput and the rules that are set up. You would probably have to have a pretty complex config to cause it to be a bottleneck. Have you picked a USB to Ethernet adapter to use with it?
--
KI6RIT

Aha you know I only briefly looked at non-ECC memory so at that savings it's not worth it.

Primarily it'll be used for a 30 Mbps Charter circuit but I may upgrade to 50 Mbps business service at some point. For straight NAT/firewall I know it can handle it. Atom CPUs can handle about 500 Mbps before they run out of steam so I've got plenty of headroom.

I may run content filtering at a later date, something like Dan's Guardian or Squidguard and I think I should have enough for that but I'm worried it may be pushing it. I don't plan to run any high demand things like Snort on there at least.

Since you're only going to be 30-50Mbs, why not go for one of these?

»store.netgate.com/Desktop-Systems-C83.aspx
--
When you are leaving.. heaven is a distance not a place. --Carissas Weird

Hmm.... that's certainly worth considering. Given the minor price difference, I'd want the 3-port model which is $225. I'd prefer gigabit ports but at my speeds, it's not necessary, just would be nice for future proofing and the rest of my network is all gigabit.

I suspect the NUC would have more horsepower in it, but it also costs more. That's a tough call.....