I am looking for rack mount hardware alternatives to my UDM SE that can be used to run opnsense or pfsense for routing, firewall, VLANs, IDS/IPS, DHCP, pfblocker.

The UDM SE handles my 1Gbps connection with IDS/IPS enabled without a problem. I am struggling to find comparable hardware at a reasonable price. I would like something that can handle 2.5Gbps with the firewall and IDS/IPS enabled.

Netgate 6100 looks like it would do the job but it retails at $800 then another $130 for the rack mount kit. It feels like you should be able to get comparable hardware cheaper than that price point. The UDM SE retails at $500.

I’m not a fan of Protectli based on feedback I’ve seen around reliability, and Qotom for other reasons, so no Chinese brands or things from Aliexpress. I’m not opposed to Mikrotik but I was more interested in pfsense/opnsense rather than having to learn RouterOS.

Supermicro seems to have good options but their SKUs are confusing, its difficult to find specific models, and again the hardware seems more expensive. I like the mini form factor for the 1U units some models have, similar to the UDM SE.

So high level:

  • 1U rack mountable (preferable, mini form factor)
  • 2.5Gbps throughput with firewall and IDS/IPS enabled
  • Quad core CPU w/ 8GB RAM should be sufficient
  • Preferably silent, active cooling acceptable if quiet fans
  • Ideally under $700
  • Preferably not Protectli, Mikrotik, or Qotom/Chinese brands/Aliexpress
  • ~100 client devices and multiple servers (hypervisor, containers, and storage)
  • waka324@alien.topB
    link
    fedilink
    English
    arrow-up
    1
    ·
    10 months ago

    Hate to say it, but you are going to HAVE to drop qualifiers or increase your budget (or go used).

    The only new as-built machines that will meet that kind of budget are the aliexpress machines.

    You COULD build your own machine, but you’ll have to get creative with parts, and you may end up having to go 2U.

    Rackmount hardware is always going to have a premium attached to it it seems.