Low power 10G capable OpnSense build reddit / selfhosted ---------------------------------------------------------------------- benbart01 · 2023-12-07 05:16 Hey guys with the direction pfsense and the community is heading I want to upgrade my current Netgate 1100 box (2W idle and 3,4W max) for a 10G (might upgrade to 4GB WAN) capable 1u build. I have found a spreadsheet with low power builds that pointed me to Pentium G5400 Wendel at Leven1tech mentioned that some CPU’s struggle with 10G cards but I don’t have enough technical knowledge to assess this. Ps how do you assess this so I don’t have to bug the lovely people in this community in the future as well I I learn and become a smart strong boy ---------------------------------------------------------------------- DrunkOnKnight · 2023-12-07 05:38 Question is better suited for r/homelab we focus on open source software not really hardware. They should be able give you NIC recommendations and so on there. ---------------------------------------------------------------------- thekrautboy · 2023-12-07 05:39 wrong sub ---------------------------------------------------------------------- ElevenNotes · 2023-12-07 06:11 There is no such thing as 10G and low power. Your best bet is a VPP capable OS like TNSR or in the future VyOS, then you can take basically any hardware and are capable of routing/natting up to 10G. With pfsense/opnsense not so much possible. ---------------------------------------------------------------------- corruptboomerang · 2023-12-07 10:44 For low power 10G the options that come to mind are (in approximate order of power) * Banana Pi (don't recall the exact model) * R86S-N305 * R86S-N305C 25G (obviously a 25G version, with the TASTY ConnectX4-LX) * Mini PC (like those from Lenovo with a PCIe slot and throwing a ConnectX4-LX in) * Normal PC with a ConnectX4-LX (throw some other stuff in there too!) I'd suggest if you go for an add-in card, my personal choice is the ConnectX4/ConnectX4-LX since they have good idle power saving features. While the ConnectX3 and other similar aged cards don't have good sleep state support etc. ---------------------------------------------------------------------- corruptboomerang · 2023-12-07 10:48 Yeah, my 'plan' if I wanted 'low power 10G routing' would be to a 10G switch + one of those mini-PC router boxes attached via a few etherchannel 2.5G links and aim to not actually need to route much traffic. ​ If you genuinely need routing for 10G you shouldn't be worrying about power consumption. ---------------------------------------------------------------------- ElevenNotes · 2023-12-07 11:46 The problem is not the routing but the 10G natting. ---------------------------------------------------------------------- corruptboomerang · 2023-12-07 11:51 Network Address Translation, what are you doing that requires NAT to run at 10G? Sounds like a very odd set-up that would require a NAT to have throughput at 10G. ---------------------------------------------------------------------- ElevenNotes · 2023-12-07 11:52 Um, a normal firewall? How else shall a device access a 10G WAN link via IPv4 if not via NAT? ---------------------------------------------------------------------- corruptboomerang · 2023-12-07 11:56 That's my point a 10G WAN link is not a 'low-power' nor 'cheap' situation. That's an enterprise problem requiring enterprise solutions. ---------------------------------------------------------------------- ElevenNotes · 2023-12-07 12:03 10G is standard where I live. 25G special and 100G exotic. So all these thousands of 10G customers don't matter? By the way OP clearly stated that he might get a 4G WAN link. 4G NAT on a low powr budget is only possible with VPP and nothing else, are you going to argue that this is not the case and opnsense can NAT 4G on a Celeron? ---------------------------------------------------------------------- NikStalwart · 2023-12-07 12:55 > 10G is standard where I live. 25G special and 100G exotic I am so, so jealous right now. I had to drop $3k to get 1G fiber to where I live. That 1G is only on paper though, because the underlying backbone can only really push 800mbit if everyone else is literally asleep. 1g down is cheap at AU$140 (~US$80), but symmetrical 1g begins to cost around US$250. And, if you want 10G, you need to pay for a different fiber and a couple grand monthly. \#JustAustraliaThings ---------------------------------------------------------------------- NikStalwart · 2023-12-07 12:59 > Ps how do you assess this so I don’t have to bug the lovely people in this community in the future as well as I learn and become a smart strong boy The way I'd go about assessing this is figuring out the basic CPU performance needed. CPU vendors list TDP in their specsheets, so look at the lowest power draw, then engineer your box backwards from the CPU. That's what I'd do if I was interested in being power efficient. I have doubts about a 10g box at 2w though. Very big doubts. I think you're looking at at least 20w. ---------------------------------------------------------------------- zwck · 2023-12-08 19:24 I also have a 10g Ftth (777 ~USD/a) and my provider recommends the following: Router: Zyxel AX7501-B1 or for the 25gig capabale MikroTik CCR2004-1G-12S +2XS. I went with a self build opnsense computer with a 10gbit network card, do I get full throughput… no, but good enough haha ---------------------------------------------------------------------- benbart01 · 2023-12-09 03:11 Thank you for this ---------------------------------------------------------------------- benbart01 · 2023-12-09 03:20 Actually right now it is a 4G connection the high tear of my ISP ---------------------------------------------------------------------- benbart01 · 2023-12-09 03:22 Thank you I will note this for the future. ---------------------------------------------------------------------- kmisterk · 2023-12-12 16:23 ## Post Removed Hey, benbart01! Thanks for your submission on selfhosted. Your post has been removed due to a violation of the purpose of the subreddit: **Self Hosting** ## Not Self-Hosted When it comes to posts regarding applications in this subreddit, they must feature a self-hosted tool, or a tool that *can be* self-hosted, or some kind of related information, help request, or otherwise related to a tool that is something that one can self-host. If you believe this post *is in fact* relevant to /r/selfhosted, feel free to [message the mods](https://www.reddit.com/message/compose/?to= /r/selfhosted&subject=Removed For Not Being Self- Hosted&message=[Removed Post](https://www.reddit.com/r/selfhosted/comments/18co9zc/-/\)) with your concerns.