@rbisig I use this switch/router (CRS326-24S+2Q+) from Mikrotik.

The box is quite steamy!!!

This device leaves nothing to be desired, but it is not intended for run-of-the-mill users who don’t know anything about networks, but everything can be learned.

With the SFP you are very flexible. Either you use fiber or copper as a connection medium between the individual network devices.

@user109

To be fair, it should also be said that the box not only has a lot of steam, but also requires a lot of steam (i.e. energy) and makes a lot of noise with the three fans. In addition, when fully expanded, depending on the SFP used, the price is well over CHF 1000.

---

@hed wrote:

@user109

To be fair, it should also be said that the box not only has a lot of steam, but also requires a lot of steam (i.e. energy) and makes a lot of noise with the three fans. In addition, when fully expanded, depending on the SFP used, the price is well over CHF 1000.

---

@hed I think you’re completely wrong about your assumptions and you don’t always have to talk badly about everything.

I used fiber SFP’s as much as possible, they don’t need as much energy as the copper SFP’s.

I can set the fans to a minimum and you can no longer hear them. (At most when restarting as is usual with all servers).

A switch/router like this doesn’t belong in the living room, but rather in a technical room with a 19″ server rack or 19″ patch distributor. The thing can roar as loudly as it wants, the Synology RS1619xs+ is even louder, but who cares?

Max 69 W isn’t much in my opinion, just take a look at Cisco switches in the same category with and without POE, they draw a lot more (100-600W) and cost 5 times as much.

TE asked everyone what they could use for 10Gbit/s (including their requirements)…

It should be clear to even the last backwoodsman that something like this isn’t available at ridiculous prices.

The latest technology has its price, but whether you really need it is another matter.

@rbisig

Sophos Hardware,

Fortinet Hardware.

Software: pfsense, opensnse

on Docker/NAS, PC device or Raspi4 8GB.

If full packet inspection is desired, you will have to get a mini PC with Ryzen.

This function requires a lot of computing power.

If you want to tackle it with pfSense, Netgate SG-4100 or the even more powerful SG-6100 would be fanless (i.e. quiet) and good quality devices with pfSense already preinstalled:

https://www.erdineering.ch/pi/Shop/Firewalls/netgate-sg-4100.html

Since they are Intel processors, they have significantly more performance than the ARM processors commonly used in consumer routers and the RAM, at 4 or 8 GB, is of course significantly larger than the usual 0.5 to 1 GB in provider routers.

There are also test reports and videos on the Internet, plus various other documentation.

For a serious evaluation, you would have to do a little additional research.

If I were already retired, I would probably start with an SG-4100 base model, because with the “upper middle class” model you already get all services including VPN server >= 1 Gbit/sec up to 2. 5 Gbit/sec.

---

@rbisig wrote:

Thank you for your discussions.

…

The cabling is almost exclusively done with Cat 7 network cables.

…

---

@rbisig

In this context, it is important that the cable remains 8-wire throughout. Unfortunately, there are still so-called split installations today, where the 8-wires are split into two junction boxes.

---

@Werner wrote:

If you want to tackle it with pfSense, Netgate SG-4100 or the even more powerful SG-6100 would be fanless (i.e. quiet) and good quality devices with pfSense already preinstalled:

[https://www.erdineering.ch/pi/Shop/Firewalls/netgate-sg-4100.html](https://www.erdineering.ch/pi/Shop/Firewalls/netgate-sg-4100. html)

Since they are Intel processors, they have significantly more performance than the ARM processors commonly used in consumer routers and the RAM of 4 or 8 GB is of course also significantly larger than the usual 0.5 to 1 GB in provider routers .

There are also test reports and videos on the Internet, plus various other documentation.

For a serious evaluation, you would have to do a little additional research.

If I were already retired myself, I would probably start with an SG-4100 base model, because with the “upper middle class” model you already get all services including VPN server >= 1 Gbit/sec up to 2.5 Gbit/sec.

---

I have been using a Netgate 6100 for about 2 years and am extremely satisfied with it. pfSense or OPNsense are probably the best open source NGFW without expensive maintenance and license costs for private households and many companies. Of course, there are not as convenient Layer 5 - 7 filters or SD-WAN functions as with a FortiGate, but the range of functions is completely sufficient in most cases. Particularly noteworthy is the good documentation and the excellent (commercial) support from Netgate respectively. pfSense. OPNsense can be expanded to include various NGFW functions using excellent plugins such as zenarmor (https://www.sunnyvalley.io/).

Hello @rbisig, unfortunately I haven’t read anywhere whether you have, for example, a NAS installed in your network that also supports virtualization, otherwise my suggestion would be to use a virtual PFSense, some of the previous speakers already have the ecological/energetic one factor discussed,

I also use a setup like this for myself,

Segmentation with vlans.

Multiple WAN,

And routing/nating options on pf,

This also allows for the possibility of building fallbacks/redundancies, in the sense that you still want to be online if the excavator tears the fiber, or if the mobile path no longer has reception at the same time…

So it’s relatively easy to configure access ports and pass them on as a trunk to the virtual PF, because they do the “magic” and in the trunk in another vlan back to the switch…

Power consumption is manageable, performance with today’s hardware is no longer a problem in my opinion,

Greeting

Chris