<div dir="ltr">I am using pfSense on a box I build with ipv6 turn on, I have to use openSUSE update server appear to be mostly ipv6 and it seems to work great. I need to learn more as I am not sure what else I can tell you. </div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Feb 10, 2017 at 12:30 PM, Derek Atkins <span dir="ltr"><<a href="mailto:derek@ihtfp.com" target="_blank">derek@ihtfp.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Thanks. One user on Amazon did report getting 940Mbps on the pfSense box<br>
(although he used Ubuntu). I just wanted to make sure there's enough<br>
power on there to do the routing I need without slowing me down.. It<br>
appears the CPU does not include AES-NI, which may affect IPsec<br>
performance?<br>
<br>
Also, can anyone confirm that pfSense will successfully policy-route IPv6?<br>
I saw a complaint on the pfSense forums from 2012 but no follow-up on<br>
whether it had been resolved.<br>
<span class="HOEnZb"><font color="#888888"><br>
-derek<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
On Fri, February 10, 2017 12:14 pm, dev null zero two wrote:<br>
> pfsense. a quad core box can do all that and Snort on a gigabit connection<br>
> easily.<br>
><br>
> Sent from my mobile. Please excuse the brevity, spelling, and punctuation.<br>
><br>
> On Feb 10, 2017 12:05 PM, "Dustin Priest" <<a href="mailto:dustin.h.strickland@gmail.com">dustin.h.strickland@gmail.com</a><wbr>><br>
> wrote:<br>
><br>
>> I'd go with the pfSense unit, personally, if for no other reason than I<br>
>> have experience with it and I know it will handle whatever I need it to<br>
>> do.<br>
>> No clue about the Edgerouter.<br>
>><br>
>><br>
>> On 2/10/2017 11:55 AM, Derek Atkins wrote:<br>
>><br>
>>> Hi,<br>
>>><br>
>>> I got my fiber upgrade installed the other day and it looks like my<br>
>>> poor<br>
>>> Mikrotik router just can't keep up. When I connect my laptop directly<br>
>>> to my AT&T router <a href="http://speedtest.net" rel="noreferrer" target="_blank">speedtest.net</a> gives me 500/950 (don't ask me why it's<br>
>>> only getting 500 down -- I plan to ask). However, when I connect<br>
>>> through my Mikrotik I get limited to about 150-200 up/down.<br>
>>><br>
>>> So I'm looking to replace the Mikrotik, but looking for suggestions.<br>
>>> The two options I'm considering at the moment are a Ubiquiti Edgerouter<br>
>>> Pro 8 [0] for $316, or pfSense installed on a 4x1Gb quad-core<br>
>>> celeron[1]<br>
>>> with 8G RAM and 64G mSATA SSD for $310.<br>
>>><br>
>>> My requirements:<br>
>>><br>
>>> 1) sustained 1Gbps throughput, even via NAT, tunnels, or other routing<br>
>>> 2) GRE tunnel support (used to tunnel my class-C network)<br>
>>> 3) IPIP (protocol 41) tunnel support (used for HE's IPv6 tunnelbroker)<br>
>>> 4) Some VPN solution (IPsec/OpenVPN/PPTP, for when I travel)<br>
>>> 5) IPv4 policy based routing so I can route my class-C over the GRE<br>
>>> tunnel and my RC1918 network via NAT (I'm pretty sure everything<br>
>>> does this)<br>
>>> 6) IPv6 policy based routing so I can have some machines on the IPv6<br>
>>> tunnel and other hosts on an ISP-supplied IPv6 network and ensure<br>
>>> packets get routed out the correct method. (my mikrotik doesn't<br>
>>> support this!)<br>
>>> 7) Multiple IPs (both v4 and v6) on an interface (I run both my class-C<br>
>>> and RFC1918 networks on the same LAN)<br>
>>><br>
>>> What do you all think about these options? Which would be more likely<br>
>>> to support my requirements?<br>
>>><br>
>>> Thanks!<br>
>>><br>
>>> -derek<br>
>>><br>
>>> [0] <a href="https://www.amazon.com/Ubiquiti-Networks-Edgerouter-Router-" rel="noreferrer" target="_blank">https://www.amazon.com/<wbr>Ubiquiti-Networks-Edgerouter-<wbr>Router-</a><br>
>>> ERPro-8/dp/B00IA5J8M8/ref=sr_<wbr>1_1?s=pc&ie=UTF8&qid=148674190<br>
>>> 9&sr=1-1&keywords=edgerouter+<wbr>pro<br>
>>> [1] <a href="https://www.amazon.com/dp/B01MEGSMRZ?psc=1" rel="noreferrer" target="_blank">https://www.amazon.com/dp/<wbr>B01MEGSMRZ?psc=1</a><br>
>>><br>
>><br>
>> ______________________________<wbr>_________________<br>
>> Ale mailing list<br>
>> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
>> <a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo/ale</a><br>
>> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
>> <a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo</a><br>
>><br>
> ______________________________<wbr>_________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo</a><br>
><br>
<br>
<br>
</div></div><span class="im HOEnZb">--<br>
Derek Atkins <a href="tel:617-623-3745" value="+16176233745">617-623-3745</a><br>
<a href="mailto:derek@ihtfp.com">derek@ihtfp.com</a> <a href="http://www.ihtfp.com" rel="noreferrer" target="_blank">www.ihtfp.com</a><br>
Computer and Internet Security Consultant<br>
<br>
</span><div class="HOEnZb"><div class="h5">______________________________<wbr>_________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" rel="noreferrer" target="_blank">http://mail.ale.org/mailman/<wbr>listinfo</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Terror PUP a.k.a<br>Chuck "PUP" Payne<br>-----------------------------------------<br>Discover it! Enjoy it! Share it! openSUSE Linux.<br>-----------------------------------------<br>openSUSE -- Terrorpup<br>openSUSE Ambassador/openSUSE Member<br>skype,twiiter,identica,friendfeed -- terrorpup<br>freenode(irc) --terrorpup/lupinstein<br>Register Linux Userid: 155363<br> <br>Have you tried SUSE Studio? Need to create a Live CD, an app you want to package and distribute , or create your own linux distro. Give SUSE Studio a try.</div></div>
</div>