Another stupid question

Status
Not open for further replies.

Fredde

Explorer
Joined
Dec 7, 2015
Messages
58
hi folks!

Im in a position now to decide to buy new parts to run pfsense or buy a new CPU to My server so i can run freenas and pfsense in virtualization?

My current CPU is in My signature.

I want to reduce the electric
consumption.

IF im buying a new CPU, after a esxi installation and freenas restore My ZFS pools and configs? Plugins i can reinstall as i Dont use that many.

/ Fredde
 

toadman

Guru
Joined
Jun 4, 2013
Messages
619
I'm curious, why do you need a new CPU? I would think the answer would be performance related, but then it depends entirely on your use case. What is your use case? What services are you using from freenas? etc...

I can't tell from the question, but is option 1 to run 2 separate servers, one for pfsense and one for freenas? And option 2 is to run one server with all services running in VMs? (On option 2 I would assume you move whatever you are running in a jail into a separate VM running on ESXi?)

The short answer in my opinion is, "yes, virtualize." But it's not clear you need any new hardware.
 

Nick2253

Wizard
Joined
Apr 21, 2014
Messages
1,633
While you can virtualize, pfSense, I would strongly recommend against it (assuming you are using pfSense as your firewall).

A firewall is expected to be a hardened machine, capable of withstanding probing attacks from the world at large. On the other hand, VMware (and other hypervisors) is not generally used in that kind of environment, so it's significantly less hardened to external attack. When you virtualize pfSense, you add an additional weakness to your firewall, in that you are exposing at least part of the hypervisor (its networking) to the internet. In theory, if you configure everything correctly, you'd probably be fine. But there's a not insignificant change that you'd either configure something incorrectly, or someone could find a bug in VMware's networking stack, and you'd suddenly be exposed to attack.

The other downside to virtualization is that it adds another layer of complexity to using FreeNAS. You'd probably want a minimum of 32GB of memory, even if you are only virtualizing FreeNAS and pfSense. You also need a storage controller to pass through. I believe, but am not certain, that you could do that with your LSI 2308, but it's something you'd want to confirm. If it doesn't work, you'd need to get a PCIe controller. You could probably repurpose your SSD to be your VMware/hypervisor boot disk and VM store, but I'd strongly recommend getting a second for a mirrored config, or else you're going to be really unhappy when it breaks.

If your concern is power consumption, there's a bunch of mini-pc boxes out of China that have an insanely small power footprint, and are more than capable of pushing 250+Mbps (depending on what exactly you're doing with your firewall).

Some examples:
And there's always eBay for some last-gen boxes, like D525, which can be had for both insanely cheap, and are insanely power efficient.
 
Last edited:

SweetAndLow

Sweet'NASty
Joined
Nov 6, 2013
Messages
6,421
buy one of those pre-build pfsense boxes from their store so you have a nice pfsense build. Buy a new refrigerator and modern hot water heater if you want to reduce electricity usage. Even your i3+pfsense will use less power at idle then a 60W light bulb. Computers now days are very power efficient, heck my gaming pc with a xeon 1230 and GTX 1070 only uses 100W most of the time.
 
Status
Not open for further replies.
Top