you can buy this:
- HP thin client T610 (it only had 1 gigabit ethernet connection, but a VLAN capable switch can easily fix that)
- TPlink SG105e
Is the above setup still good for home network with url filtering, access control, bandwidth control, ips/ids? Thank you.
-- edited by Cuida on Nov 25 2019, 11:10 AM
yep its still capable machine, that thing can route 1gbit connection without breaking a sweat.
IPS/IDS is also good, good thing about this hardware is it support upto 16gb of ram so just slap in more ram to it, but the cpu is a bit too much for it so it can only route around 300mbit traffic with suricata enabled.
url filtering is hopeless now a days due to how SSL website works now, you cant really blame pfsense here, any firewall out there cant handle this thing out there not unless you want to break the internet that badly. Take note if your force MITM the traffic, google services will not work it will always complain about security certificates, if you use the latest google chrome as well, MITM is no longer viable as by default chrome now ignores self sign certificates.
access control and bandwidth control is probably the basic thing that pfsense can do so yeah sure.
sa setup na naka VM ang pfsense
Pwede ba na isa lang ang LAN card ng host PC, at si pfsense na naka VM ang magiging gateway.
para sa diskless server na iisa lang ang Lan, possible ba? paano ang settings mga sir?
^possible, just get TPlink SG105e or any switch that support 802.1q vlans.
after that you can just setup your pfsense as 1 network card (both physically and virtualization setting). just make sure that you set the network card setting on the vm to allow all promiscuous mode.
thanks sa info sir...
- Post deleted #12286298
Looking to build my own pfsense box.
Anyone have a good budget build that can handle, over a gigabit connection about 1.4gbit?
^the main computer component should be easy to get, a 1151 motherboard with G4400 should be more than enough. (it can do NAT around 3gbit just fine) for ram 4 -8gb ask your self if you want to run more services on it (eg suricata, pfblocker).
now for the hardcore part, the NIC, since your aiming 1.4gbit, you have no choice but to go SFP+ or 10GigE card as we say always go with Intel branded nic, you can get this cards on ebay for like around 100-150usd a dual port x540-T2 should be more than enough.
total damage, around 25k (including case and reputable branded 80+ psu)