I have used both pfsense and Opnsense with cityfibre. I prefer Opnsense the machine is just an old optiplex 3020 with a E3-1245 v3 and 16GB ram very overkill. I have maxed out gigabit with an i3 2nd gen with 4GB ram. It all depends on your use case. If your running things like snort and suricata you will need a bit more power. If your doing just standard routing an i3 would be fine.anyone use something like pfsense to do routing on cityfiber? what sort of cpu for full speed?
the stock vodafone router web gui is just very slow, takes ages to login and takes even longer to logout. lolI have used both pfsense and Opnsense with cityfibre. I prefer Opnsense the machine is just an old optiplex 3020 with a E3-1245 v3 and 16GB ram very overkill. I have maxed out gigabit with an i3 2nd gen with 4GB ram. It all depends on your use case. If your running things like snort and suricata you will need a bit more power. If your doing just standard routing an i3 would be fine.
the stock vodafone router web gui is just very slow, takes ages to login and takes even longer to logout. lol
yes i do have the pppoe details from voda so thats good. but i read that routing 1gbit takes a lot of cpu power without using dedicated packet processing that these stock routers have?Just use the stock Vodafone router as your wireless and let Opnsense do the rest It's what i did. You will need to request your PPPOE details from Vodafone to set it all up.
yes i do have the pppoe details from voda so thats good. but i read that routing 1gbit takes a lot of cpu power without using dedicated packet processing that these stock routers have?
What sort of speed you get on openvpn?Just make sure you disable hardware checksum offloading (checked by default) and you will route at 1gbit all day long. Just make sure you get a dual port intel nic. There is some known problems using realtek chips. PPPOE is slightly heavier on the CPU then DHCP but i never go above 30-40% CPU usage when downloading legal torrentsat 111mb/s
True, but gives an idea what sort of CPU can achieve what sort of speed.Whatever the speed, it's guaranteed to be slower than Wireguard.
mines been down a month or so but not going live till end oct -nov .. still connecting up all the areas .. they lay the pipe then run the fiber ..Cityfibre installed their cables a while ago now but they still aren't live. I have until the end of next month to leave virgin for free so fingers crossed they go live by
Well its finally installed, and so far I'm more than happy, its a bit overkill so longer term I plan to virtualise it on the same hardware. So I went for a i3-n305 8 core intel box with 4 x intel i-226V network ports. OPNSense is running and now i can max out my CityFibre connection and have a 91% idle CPU. it currently has 16Gb on board but like I said the plan is to throw ESXi and up that to 32Gb and put the OPNSense firewall into a VM. Nice and future proof - for the next few years at least.Sounds like a good Plan... keep us in the loop!
Nice, are you doing QOS or do you feel there is no point or need?Well its finally installed, and so far I'm more than happy, its a bit overkill so longer term I plan to virtualise it on the same hardware. So I went for a i3-n305 8 core intel box with 4 x intel i-226V network ports. OPNSense is running and now i can max out my CityFibre connection and have a 91% idle CPU. it currently has 16Gb on board but like I said the plan is to throw ESXi and up that to 32Gb and put the OPNSense firewall into a VM. Nice and future proof - for the next few years at least.
step by step, i might do QoS, but want to take it slowly. But to be honest, i don't currently see a need.Nice, are you doing QOS or do you feel there is no point or need?