From nobody Fri May 13 13:55:43 2022 X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 21C5C1AD4EEA for ; Fri, 13 May 2022 13:55:54 +0000 (UTC) (envelope-from freebsd@qeng-ho.org) Received: from mailout.qeng-ho.org (mailout.qeng-ho.org [217.155.128.244]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4L09CY2wlFz3Kqm for ; Fri, 13 May 2022 13:55:53 +0000 (UTC) (envelope-from freebsd@qeng-ho.org) Received: from [172.23.1.2] (arthur.home.qeng-ho.org [172.23.1.2]) by mailout.qeng-ho.org (Postfix) with ESMTP id E090B91B02; Fri, 13 May 2022 14:55:43 +0100 (BST) Message-ID: Date: Fri, 13 May 2022 14:55:43 +0100 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0 Subject: Re: pfsense and the Trigkey Green G1 mini-computer Content-Language: en-GB To: Tom Browder , freebsd-questions@freebsd.org References: <96660e4f-5d35-f391-37ee-78c228e66cf2@qeng-ho.org> <0597c1d7-9587-c607-e244-f3baeac37cb8@qeng-ho.org> From: Arthur Chance In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4L09CY2wlFz3Kqm X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of freebsd@qeng-ho.org designates 217.155.128.244 as permitted sender) smtp.mailfrom=freebsd@qeng-ho.org X-Spamd-Result: default: False [-3.30 / 15.00]; RCVD_TLS_LAST(0.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:217.155.128.240/29]; NEURAL_HAM_LONG(-1.00)[-1.000]; TAGGED_RCPT(0.00)[]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[qeng-ho.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-1.000]; RCPT_COUNT_TWO(0.00)[2]; MLMMJ_DEST(0.00)[freebsd-questions]; FREEMAIL_TO(0.00)[gmail.com,freebsd.org]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:13037, ipnet:217.155.0.0/16, country:GB]; RCVD_COUNT_TWO(0.00)[2]; MID_RHS_MATCH_FROM(0.00)[] X-ThisMailContainsUnwantedMimeParts: N On 13/05/2022 14:21, Tom Browder wrote: > On Fri, May 13, 2022 at 02:35 Arthur Chance wrote: > ... >>>> Final note: you might want to look at OPNsense as an alternative to >>>> pfSense. I'm in the process of switching as pfSense appears to be more >>>> commercially oriented these days. > ... >>> Can you or anyone else recommend a suitable micro-computer that I can >>> install FreeBSD on to run OPNsense? > ... >> As others have remarked, you just install OPNsense, it's FreeBSD >> modified to install with routing/firewall capabilities and an easy(-ish) >> config system from the start. > > Got it--same way as Pfsense. > >> As you already have the Trig G1 you ought to be able to use it *if* you >> can find a way into its BIOS. What have you tried so far? > > I tried a couple of times changing the boot device and never was able > to get past a Windows boot. (Note I was trying to boot off a USB DVD > and DVD was one of the boot options in the BIOS.) I'm returning it to > Amazon and looking for something else. > ... > > That search sounds like a good idea, thanks. I did find what seems > like a better choice: Qotom-Q330G4. Much better documentation, too. > I'm looking at 8 Gb RAM and 128 Gb SSD. Is that too much? That looks pretty good (it's similar to the Kettop box I've got), and the ethernet interfaces are Intel which is a better choice than Realtek. In the past I've run routers with only 2GB of memory and never seen more than about 50% memory usage, but it all depends on how heavy the traffic will be and how many services you might want to run beside the basic firewall. OPNsense docs say 4GB of memory and 40GB of SSD is reasonable, 8GB + 120GB will handle all but the most extreme uses. This is the relevant page if you haven't found it https://docs.opnsense.org/manual/hardware.html -- All network cabling aspires to the condition of macramé.