OPNSense DEC740 with OpenWrt

Hi,

I've always wanted to have a device that can handle two times (or more) 10G and OpenWrt.
This looks like an affordable option and I was wondering if someone tried it already?
As this is X86 it should work with OpenWrt out of the box, but the SFP+ I don't know if this might be a show stopper.

I would really love to buy one though.

It has

  • Ryzen Embedded V1500B with 4 Cores and 8 Threads with up to 2,2 GHz.
  • 2 x 10G SFP+
  • 3 x 1G Copper
  • 128 GB SSD
  • 4 GB RAM
  • 12-16 W TDP

for ~700 €

What do you think?

Expensive :slight_smile:

If you want dual 10G paired with a low power consumption and an OKish CPU performance then I think it's really worth the money.
Of course it doesn't compare to all the typical low end MIPS devices.

Another option but with only one 10G interface would be the Mochabin, which will probably surface in march next year. It's roughly a third of the price. but if you want to route 10 between networks it will not be good enough.

If you're going to build one yourself, it's going to be larger, have fans, and perhaps a higher TDP.

Used dual sftp+ NICs are $25 on ebay, quad port gbit NICs are less.

Building a low end pc hosting the two above, shouldn't cost more than $250-300, depending on what parts you use, and if they're used or new.

Yeah that's what I currently do. :stuck_out_tongue_winking_eye:

Then I suggest you keep doing it :wink:
I do it too.

That's some fine looking piece of hardware, but most of the premium you pay is for the size.

on x86 most of the low level magic wizardry bs that makes SFP ports hard to support with OpenWrt on an embedded device is handled by the BIOS/UEFI, or the network controller firmware.
Also OPNSense is FreeBSD and that means their driver support is very limited, so it's either an Intel or a Broadcomm network chipset.

So I'd say 99% likely to "just work".

Yes but not by a whole lot. Especially if you get a low profile chassis.

A slightly bulkier case, especially if it doesn't need to be rack-mountable (1U/ 2U devices are particular difficult to cool, unless you mount several jet engines inside), tends to be much easier (and therefore less noisy-) to keep cool (vertical tends to be easier than horizontal). Very few devices can really operate passively (and that usually comes at a premium), but an 85-120 mm fan running at low speed can be pretty silent (especially higher priced/ better fans) and keep the case within safe margins.

I mean common x86 hardware of course is an option. On the other hand I really think you won't even get near a power consumption of around 25 W, paired with those kind of specs. My current sollution is an Intel 10700t, marked as 35W TDP. I know TDP doesn't translate to power consumption but the actuall power consumption is way higher with around 55W and peaks over 100W.
With AMD current low power CPUs are equal to not available and Intel really doesn't do a good job when it comes to low power CPU paired with performance in range of desktop CPU (Atoms snails aside).

So all options taken into account, I really think this is an excellent piece of hardware if price isn't the limiting factor. If I will get my hands on some of those boxes I will be happy to share my findings with you.

It depends, if you can set power targets or not. On AMD you can usually do that in BIOS, I don't know for Intel. This will of course tank the performance because that's what determines how much and how long they run at burst clocks, but it's also what they do in embedded devices and laptops.

Also it depends from how big of a power hog is the NIC cards. Older (first/second gen) dual port 10Gbit cards can easly burn 15W on idle (and get hot as the Sun), while more modern cards like mellanox connectx3 can go down to a few watts per port and actually not need a fan to not melt down

Also fun fact, the motherboard choice (and how much you can disable in the BIOS) makes a difference. Well-optimized boards can go down to 5w on idle, badly optimized boards can waste 20w doing nothing.

For most uses (aside from very busy enterprises, keeping the router loaded all time), you mostly need to optimize for the idle use case, as that's the state your router will remain in for most of the day. How much it may burn under full load is much less relevant, it quickly switches to full power, gets its job done and then continues to idle (or close to that).

With AMD, there is the option to leave out the southbridge on small, SOC-like, boards, saving a lot of (idle-) power - but that also kills of your extensibility with additional ethernet cards.

The mere presence of a dedicated (not CPU internal-) graphics card usually costs you ~20-30 watts idle alone.

So the major powersaving aspect to take care of is indeed the mainboard, less extensibility == less power - and with >2.5 GBit/s ethernet, the network card(s) matters a lot as well.