The hardware setup requires a careful preparation and selection ofthe standard PC hardware components for the intended installation ofOPNsense.
⚠ Computer hardware with the open source security software OPNsense®pre-installed can be purchased directly from various (online) stores.
Tip
The OPNsense development team encourage everyone looking for a turn-key solutionto buy from Deciso or one of the other partners listed at our partner page.Listed partners make significant contributions back to the project.
Supported hardware architectures¶
OPNsense® is available for x86-64 (amd64) bit microprocessor architectures.Full installs on SD memory cards,solid-state disks (SSD) or hard disk drives(HDD) are intended for OPNsense.
While the range of supported devices are from embedded systems to rackmounted servers, the hardware must be capable of running 64-bit operatingsystems.
Hardware requirements¶
For substantially narrowed OPNsense® functionality there is the basicspecification. For full functionality there are minimum, reasonable andrecommended specifications.
Minimum
The minimum specification to run all OPNsense standard features that donot need disk writes, means you can run all standard features, exceptfor the ones that require disk writes, e.g. a caching proxy (cache) or intrusion detectionand prevention (alert database).
Processor | 1 GHz dual core cpu |
RAM | 2 GB |
Install method | Serial console or video (vga) |
Install target | SD or CF card with a minimum of 4 GB, use nano images for installation. |
Table: Minimum hardware requirements
Reasonable
The reasonable specification to run all OPNsense standard features,means every feature is functional, but perhaps not with a lot of usersor high loads.
Processor | 1 GHz dual core cpu |
RAM | 4 GB |
Install method | Serial console or video (vga) |
Install target | 40 GB SSD, a minimum of 2 GB memory is needed for the installer to run. |
Table: Reasonable hardware requirements
Recommended
The recommended specification to run all OPNsense standard features,means every feature is functional and fits most use cases.
Processor | 1.5 GHz multi core cpu |
RAM | 8 GB |
Install method | Serial console or video (vga) |
Install target | 120 GB SSD |
Table: Recommended hardware requirements
Hardware guide
The hardware required for your local OPNsense, will be determined by theintended minimum throughput and thefeature set.
Impact of Feature set¶
While most features do not affect hardware dimensioning, a few featureshave massive impact on it. The candidates are:
- Squid
a caching web proxy which can be used for web-content control,respectively. These packages rely strongly on CPU load anddisk-cache writes.
- Captive portal
settings with hundreds of simultaneously served captive portal userswill require more CPU power in all the hardware specificationsdisplayed below.
- State transition tables
it is a known fact, that each state table entry requires about 1 kB(kilobytes) of RAM. The average state table, filled with 1000entries will occupy about ~10 MB (megabytes) ofRAM.OPNsense usage settings with hundred of thousands of connectionswill require memory accordingly.
Throughput¶
The main hardware-factors of the OPNsense setup involved are CPU, RAM,mass storage (disc), the number and quality of network interfaces.
Throughput (Mbps) | Hardware requirements | Feature set | Users / Networks |
|---|---|---|---|
11-150 | Basic spec. | narrowed | adjusted (10-30) |
11-150 | Minimum spec. | reduced | adjusted (10-30) |
151-350 | Reasonable spec. | all | substantial (30-50) |
350-750+ | Recommended spec. | all | substantial+ (50-150+) |
Mbps (Mbit/s or Mb/s) - Megabit per second - 1,000,000 bits per second | |||
- Network interface cards
As the FreeBSD hardware-lists and -recommendationssay, Intel® network interface cards (NIC) forLANconnections are reliable, fast and not error-prone. Intel chipsetNICs deliver higher throughput at a reduced CPUload.
Supported hardware
FreeBSD is the base of OPNsense. All FreeBSD driversare included in the OPNsense kernel, and the hardware compatibility isthe same.
Tip
If you are looking to buy new hardware then take a look at our partner pageas these partners contribute back to OPNsense and sell hardware that is know to work well.
For further help and support, see
List of references
Schellevis, Jos; Hardware requirements; OPNsense > Getstarted (2015)
McKusick, Marshall; Neville-Neil, George V; Warson, Robert NM; TheDesign and Implementation of the FreeBSD Operating System (2015);Addison-Wesley, New Jersey; ISBN 978-0321968975
