Re: Hardware rec, 10 gigabit home firewall

Hi,

On Sat, 24 Aug 2024, at 09:15, Anders Andersson wrote:

I bought an 85 year old house in the woods, and apparently I can get 10 Gbit/s there. My good old APU4 firewall is barely keeping up with 100 Mbit/s so I need to look for an alternative.

It won't do 10Gbps but you should be able to do significantly better than 100Mbps

My APU4C4 seems to have no trouble routing/filtering things at up to 450Mbps, plus hosting unbound+nsd. Not doing any IPSec/Wireguard. I don't know what its true limits are as I suspect I'm limited by my wifi APs.

What else are you running on it?

My goal is an OpenBSD firewall/router that can do the packet filtering and some VLAN and routing without having to worry about adding too much. I've never dealt with anything faster than gigabit, is there a "best" 10 gigabit chipset for OpenBSD that supports all the hardware offloading features and whatever multi-process functionality is already implemented?

Something small and stand-alone would be nice, with 3-4 ports.

It's unfortunate but it seems there's not really an obvious compelling APU2/3/4 replacement out there that ticks all the same boxes (well documented/supported, serial console, fanless, small, good ethernet chipset, can use NVMe storage) *and also avoids ticking the unwanted boxes*.

John