OPNsense Hardware Options

20230721 – After researching around for hardware for OPNsense we had several requirements :

• Intel Core Processor, prefer an option for i3, i5, i7 and at least Gen10 or higher
• At least 2 memory slots for expansion – DDR4 3200Mhz or DDR5 better
• M.2 PCIe x4 for latest NVME SSDs
• At least 6 ethernet ports – prefer something higher than typical 1Gbps, 2.5Gbps or 10Gbps would be nice.
• Low power consumption
• Fanless design
• USB 3 for a quick install experience

After searching forums, ebay, amazon, aliexpress and several other custom build sites, we found the brand HUNSN to have the options that fit.

Some useful links :

• Official OPNsense documentation :
  https://docs.opnsense.org/manual/hardware.html
• OPNsense partner hardware specs :
  https://www.scope7.de/en/hardware-en

Specifications and reviews :

• Review and breakdown of what’s inside :
  https://www.cnx-software.com/2023/01/23/fanless-alder-lake-network-appliance-comes-with-six-2-5gbe-interfaces/
• The ideal units from Amazon, easiest purchase solution (we tried going direct, they redirected us to Amazon)
  Note that these are barebone systems, not including RAM or SSD – we prefer to buy that separately.
  https://www.amazon.com/dp/B0C9PWMCGF?ref=myi_title_dp&th=1
  • i3 @ $449
    https://www.intel.com/content/www/us/en/products/sku/226269/intel-core-i31215u-processor-10m-cache-up-to-4-40-ghz-with-ipu/specifications.html
    • Not much difference in price compared to the i5. The value for money on the i5 with the extra CPU/Threads makes this option not worth exploring.
  • i5 @ $536
    https://www.intel.com/content/www/us/en/products/sku/226266/intel-core-i51235u-processor-12m-cache-up-to-4-40-ghz-with-ipu/specifications.html
    • This unit seems to hit the sweet spot with CPU Cores\Threads for performance. 5-8 VPNs while running other functions such as WAF & webproxy.
    • 50-150 Users
  • i7 @ $744
    https://www.intel.com/content/www/us/en/products/sku/226258/intel-core-i71265u-processor-12m-cache-up-to-4-80-ghz/specifications.html
    • This unit would be ideal, maxed out with RAM to run Proxmox and virtualize OPNsense + run a virtual SMTP relay. Would easily support 10 VPNs, WAF, webproxy and several other functions.
    • 50-250 Users
  • Pentium Gold @ $333
    https://www.intel.com/content/www/us/en/products/sku/226262/intel-pentium-gold-processor-8505-8m-cache-up-to-4-40-ghz/specifications.html
    • This unit seems appropriate for small offices, minimal requirements, only 3-4 VPNs.
    • 10-30 Users
• Another option with slightly lower budget options :
  https://www.amazon.com/dp/B0C7L4HKC7?ref=myi_title_dp&th=1
  • i3 @ $356
    https://www.intel.com/content/www/us/en/products/sku/208656/intel-core-i31125g4-processor-8m-cache-up-to-3-70-ghz/specifications.html
    • This unit seems appropriate for very small offices, minimal requirements, only 3-4 VPNs.
    • 10-30 Users
  • Pentium Gold @ $281
    https://www.intel.com/content/www/us/en/products/sku/208667/intel-pentium-gold-7505-processor-4m-cache-up-to-3-50-ghz-with-ipu/specifications.html
    • This unit seems appropriate for very small offices, minimal requirements, only 2-3 VPNs.
    • 10-20 Users