Kim M Jørgensen wrote:
> Jeg ved næsten ikke hvor jeg skal stille dette spørgsmål henne men prøver
> her.
>
> Jeg har længe kørt med pfsense som firewall og er meget tilfreds med en 4 /
> 0,7 mbit linje.
>
> Men nu skirfter jeg over til en anden udbyder og får en 20/2 Mbit linje som
> jo er betydeligt mere.
>
> Så er der nogen der ved hvilke krav der skal være til PC'en for at kunne
> trække sådan en forbindelse.
> På nuværende tidspunkr er den en Celleron 300 Mhz med 128 MB RAM.
>
> Bare så jeg så ikke får sådan en hurtig forbindelse og den så ikke kan følge
> med pga firewallen ikke kan følge med.
>
> Overvejer dog at gå over til en VIA EPIA 1200 Mhz ITX bundkort med dual wan.
> De de ikke fylder særlig meget.
> Men hvsi den den gamle stadig kan følge med haster det jo ikke.
>
>
CPU and RAM
pfSense is only supported on the x86 architecture. The minimum
requirements of pfSense are a 133 MHz CPU with a minimum of 128MB RAM.
This machine will serve well as a basic firewall for a 'slow' broadband
internet connection, such as an ADSL(1) line. However more demanding
uses will require better hardware. A CPU of 400+ Mhz in combination with
greater than 128MB RAM is recommended.
If the fastest NIC in your machine is 10/100Mbps: Bear in mind that the
CPU will probably be the bottleneck in your system. Also, most
benchmarks will be for single TCP transfers across the firewall, and
more complex traffic to multiple hosts will take more CPU power and so
decrease firewall performance. If maximal speed is important, we suggest
erring on the side of caution.
If you want to run a Gigabit NIC: You will need not only a very fast
CPU, but also PCI-X connectivity as the standard PCI bus is saturated by
this much data. Consider talking to the developers at #pfsense on
irc.freenode.net if you want advice on building a pfSense box for this
level of traffic.
See below for advice on Ethernet NIC choice, as a low-quality card can
increase CPU usage on your firewall substantially.
You can also run pfSense on embedded x86 hardware. Currently the
PC-Engines WRAP, Soekris Platforms and the NexCom platform are being
used by the developers to test the embedded version of pfSense, so
support for these should be good. Every platform supported by FreeBSD
6.x should work, though some adjustments to the pfSense software may be
required.
To help judge whether an embedded platform is sufficiently powerful for
your requirements, the WRAP, with its 266MHz 586 Geode processor, can
currently route about 32Mbps between its ethernet interfaces. It is also
capable of saturating the 'real-world' maximum bandwidth of 802.11g
cards (~25Mbps) across a bridged ethernet-wireless interface.
|