Is it a good idea to run pfsense in a VM? and just dedicate 2 network cards to the VM? I have a small server an older custom build Core 2 Duo which is only mostly used as a file server. Could I install pfsense in a VM and it run good? Or is it just recommend to use dedicated hardware? I have another computer to use but its a lower end AMD from 2008
pfsense in a VM?
- Thread starter hyelton
- Start date
sfx2000
Part of the Furniture
better to do it the other way around - pfsense with samba in a freebsd jail...
That way you don't have the overhead of running KVM/QEMU or Xen, and pfSense stays more secure...
Something to look at
http://ghanima.net/doku.php?id=wiki:pfsense:samba4jail
That way you don't have the overhead of running KVM/QEMU or Xen, and pfSense stays more secure...
Something to look at
http://ghanima.net/doku.php?id=wiki:pfsense:samba4jail
Yes,
Yes, you definitely can. I am running it in an ESXi-hosted vm anyway.
But with the hardware you laid out there, I have some question marks. You should use an energy efficient config, the electric bill can be big if you use a desktop class setup. I haven't heard of any 2008-era AMD cpu that's energy efficient.
Also, assuming you'd want to use OpenVPN, you should look at one of the AES-NI capable processors - Avoton, Rangeley, Pentium N3700 - for hw accelerated encryption.
Yes, you definitely can. I am running it in an ESXi-hosted vm anyway.
But with the hardware you laid out there, I have some question marks. You should use an energy efficient config, the electric bill can be big if you use a desktop class setup. I haven't heard of any 2008-era AMD cpu that's energy efficient.
Also, assuming you'd want to use OpenVPN, you should look at one of the AES-NI capable processors - Avoton, Rangeley, Pentium N3700 - for hw accelerated encryption.
The virtual WAN NIC is the only one exposed to the internet. The traffic through it is obviously inspected by pfSense. The ESXi management NIC only has a private static IP and it's definitely separate from the virtual LAN NIC that serves the internal network. There's no direct link between ESXi and internet. I fail to see how security could be compromised here. The only port opened to the world is OpenVPN.
Forgot to mention that the mainboard I'm using has 4 gigabit NICs, which makes it easy to allocate one for each purpose.
Last edited:
System Error Message
Part of the Furniture
some VMs can dedicate a physical component to a VM so if you were using VMware and running pfsense you could give the physical NICs to the OS and save 1 NIC for managing the VM. To do this you should at least get yourself a quad port server NIC and use onboard to manage the VM and the entire card to pfsense.
Similar threads
Similar threads
Similar threads
-
-
-
-
-
pfSense vs. OPNsense AFA offloading logging, database etc to other hardware
- Started by slackjaw99
- Replies: 4
-
-
-
Latest threads
-
LAN > DHCP List - Manually Assigned Name + Icon DONT SAVE
- Started by copperhead
- Replies: 0
-
-
-
RT-AC87U 5GHz frequently dropping after latest signature update
- Started by bibbis
- Replies: 0
-
Sign Up For SNBForums Daily Digest
Get an update of what's new every day delivered to your mailbox. Sign up here!