Post B7Ua5haU0dLbEDmfrs by joacim@mastodon.melin.org
(DIR) More posts by joacim@mastodon.melin.org
(DIR) Post #B4HqBXS9Q86tqXEOW0 by selea@social.linux.pizza
0 likes, 1 repeats
Alright, I need fedis help hereMy OpenWRT for my servers router decided to die, which made me realize that I really need to fix something that is redudant.Preferably something rack-mounted, something that can run OPNsense - and not something that costs to much.Ideas?#askfedi #opnsense #firewall
(DIR) Post #B4HqZSbf5jtHlU5QjQ by ilias@discuss.systems
0 likes, 0 repeats
@selea Topton N150 mini pc's from AliExpress run Opnsense pretty well.
(DIR) Post #B4Hql4wStwLJqVMD7Q by DeltaLima@social.la10cy.net
0 likes, 0 repeats
@selea I am a big Fan of the zoatec zboxes. You can get Used ones for about 50-70€. They have celeron n3xxx n4xxx SoC with dual nic (1Gbit).Had those as primary Firewall for a Company office i ran in the past, with pfsense on it
(DIR) Post #B4HqlXKtKiWDuN074y by niqdanger@social.linux.pizza
0 likes, 0 repeats
@selea I've seen 1U 15" deep super micro servers go for less than $100 US around here. 16G, 600GB SATA. They are a few years older but would run OPNsense great (depending on your needs) My home OPNsense is running a fanless Celeron PC I picked up for a little less than $300. Not sure what the prices look like now.
(DIR) Post #B4HrCLCsXNdm6o2BKi by selea@social.linux.pizza
0 likes, 0 repeats
@niqdanger I think I would want something that is drawing that much power like those supermicro ones.Well, if there is Atom ones it would be nice, but xeon ones tends to draw more.
(DIR) Post #B4HrGLgug71SllzfZw by selea@social.linux.pizza
0 likes, 0 repeats
@DeltaLima Hmm would you mind sending me a link?
(DIR) Post #B4HrL1bylFO9wRup9M by selea@social.linux.pizza
0 likes, 0 repeats
@ilias I use something similar at another place.Do you know if these can be rack mounted?
(DIR) Post #B4HrdXMPST3XcbSbGS by greem@cyberplace.social
0 likes, 0 repeats
@ilias @selea if you can find any for sale - N100 and N150 mini PCs are extremely hard to find at the moment. There's a bajillion Celerons but very very few 4+ port N100/N150s.I spent the last 48 hours trying to dig one up and ended up with an N100 with 2x i225-V ports.
(DIR) Post #B4HrdXXkmI88Bmlewi by selea@social.linux.pizza
0 likes, 0 repeats
@greem Found some on ali, thanks to @ilias who pointed me thereI think also @joacim sent me a link to this one too
(DIR) Post #B4HsgB135hS990I8Q4 by joacim@mastodon.melin.org
0 likes, 0 repeats
@selea @niqdanger Xeons as a firewall is like setting fire to your pay check while laughing uncontrollably.
(DIR) Post #B4HtDPr2wT3uioSkT2 by greem@cyberplace.social
0 likes, 0 repeats
@selea @ilias @joacim oof, that's an eye-watering price compared to last year. My last N100 (also Topton) was around £100, 32 GB RAM & 256 GB SATA SSD about £50-£60 each. And that was only 18 months ago!
(DIR) Post #B4HvN9F9kxiO0WVZcu by selea@social.linux.pizza
0 likes, 0 repeats
@greem I ended up with two of these.@ilias @joacim
(DIR) Post #B4HwRlqsFlrKrTv0nw by niqdanger@social.linux.pizza
0 likes, 0 repeats
@selea I should have clarified, I didn't mean the Xeon ones! They have celleron and i3s. I have a celleron one that was rebaged by a vendor. I repurposed it and it's been great. I ripped the front cover off though.
(DIR) Post #B4HwsepQTSCetj3tU8 by fedops@fosstodon.org
0 likes, 0 repeats
@selea one of the Celeron- or Atom-based thin clients that are flooding eBay could be good. You probably need one with a PCIe slot for additional Ethernet interfaces. 70-ish Eur will get you 8GB Ram and a 64GB SSD.
(DIR) Post #B4Hzk5CTM4e5wcRcae by DeltaLima@social.la10cy.net
0 likes, 0 repeats
@selea https://www.zotac.com/at/product/mini_pcs/zbox-ci337-nano-barebone-0This is afaik the latest model of this zbox line, the predecessors of it can be found on ebay and co, they are called CI327 and so on
(DIR) Post #B4KiXOzPLtVjoCa5BY by ewon_c@social.linux.pizza
0 likes, 0 repeats
@selea you said preferably rack mountable, but everyone's suggesting N150 mini PC?? Check out Dell PowerEdge R430, used...not going to be more expensive than a new mini PC, and often comes with free DDR4 RAM
(DIR) Post #B4LCTa7h0rRVo0YC7k by selea@social.linux.pizza
0 likes, 0 repeats
@ewon_c Yeah, I ended up with non-rack machines.I'll get a rackmounted shelf
(DIR) Post #B7Syeu1Wgoj3YaOm7E by selea@social.linux.pizza
0 likes, 0 repeats
The firewalls I got, ended up being shit.OPNsense crashes when I set up VLANs for some reason on a lagg, the machines reboot.After after a couple of crashes - they end up in a broken state.Everything from missing vxlan-configs to just filesystem corruption.RAM is most likely broken.
(DIR) Post #B7Sz2U7Qee8sAGP8IC by selea@social.linux.pizza
0 likes, 0 repeats
I'll try @news on those boxes. They did not crash for a week with I had fedora running. So it may just be some bad drivers
(DIR) Post #B7T1JsDuUHvjkqr5Q8 by joacim@mastodon.melin.org
0 likes, 0 repeats
@selea wtf. memtest?
(DIR) Post #B7T82K2f1GiwV0AgbI by selea@social.linux.pizza
0 likes, 0 repeats
@joacim Memtest says OK
(DIR) Post #B7T9nkwYuwNFUuV7aa by marcus@mastodon.nickebo.net
0 likes, 0 repeats
@selea @joacim
(DIR) Post #B7TDBJPVEj8uuvxgRM by joacim@mastodon.melin.org
0 likes, 0 repeats
@selea Drivers says no
(DIR) Post #B7UZd0o7TGCkRLTwdU by selea@social.linux.pizza
0 likes, 0 repeats
@joacim Yeah it runs perfectly under Linux, I guess freebsd does not like intel drivers
(DIR) Post #B7UZeRR9wpilJuQMhk by selea@social.linux.pizza
0 likes, 0 repeats
RAM is not broken, seems like a driver issue
(DIR) Post #B7UZpLoFDBr13GQLXU by joacim@mastodon.melin.org
0 likes, 0 repeats
@selea linux -> iptables -> ftw
(DIR) Post #B7UZysp3q4fY2wLqMa by selea@social.linux.pizza
0 likes, 0 repeats
@joacim trying out ipfire, if I can stop being confused by it..
(DIR) Post #B7Ua5haU0dLbEDmfrs by joacim@mastodon.melin.org
0 likes, 0 repeats
@selea KISS: Iptables.
(DIR) Post #B7UadFpHjP5SyShriS by antsu@p.antsu.net
0 likes, 0 repeats
@selea What brand/model are the NICs?
(DIR) Post #B7UfXWsPvNqTtAGFDU by selea@social.linux.pizza
0 likes, 0 repeats
@antsu Intel I226-V (rev 04)
(DIR) Post #B7V0vJsY049nZ1VW08 by antsu@p.antsu.net
0 likes, 0 repeats
@selea Ah, then my suggestion doesn't apply. I had similar problems, but my NICs are Realtek. It was resolved by installing the alternative driver package.
(DIR) Post #B7V3sU3A1kBQ6RoL9U by selea@social.linux.pizza
0 likes, 0 repeats
@antsu Those interfaces are 2.5Gbe, can be the culprit...