Hardware

Minimum Hardware Requirements

The following outlines the minimum hardware requirements for pfSense 1.2.x. Note the minimum requirements are not suitable for all environments, see the Hardware Sizing Guidance page for information. CPU - 100 MHz Pentium RAM - 128 MB Requirements specific to individual platforms follow.   Live CDCD-ROM drive USB flash drive or floppy drive to hold configuration file Hard drive installation CD-ROM for initial installation 1 GB hard drive Embedded 512 MB Compact Flash card Serial port for console Hardware Sizing Guidance When sizing hardware for use with pfSense, two main factors need to be considered. Throughput required Features that will be used Throughput Considerations If you require less than 10 Mbps of throughput, you can get by with the minimum requirements. For higher throughput requirements we recommend following these guidelines, based on our extensive testing and deployment experience. These guidelines offer a bit of breathing room because you never want to run your hardware to its full capacity.  10-20 Mbps - No less than 266 MHz CPU 21-50 Mbps - No less than 500 MHz CPU 51-200 Mbps - No less than 1.0 GHz CPU 201-500 Mbps - server class hardware with PCI-X or PCI-e network adapters, or newer desktop hardware with PCI-e network adapters. No less than 2.0 GHz CPU. 501+ Mbps - server class hardware with PCI-X or PCI-e network adapters. No less than 3.0 GHz CPU. Feature Considerations Most features do not factor into hardware sizing, though a few have significant impact on hardware utilization.  VPN - Heavy use of any of the VPN services included in pfSense will increase CPU requirements. Encrypting and decrypting traffic is CPU intensive. The number of connections is much less of a concern than the throughput required. A 266 MHz CPU will max out at around 4 Mbps of IPsec throughput, a 500 MHz CPU can push 10-15 Mbps of IPsec, and relatively new server hardware (Xeon 800 FSB and newer) deployments are pushing over 100 Mbps with plenty of capacity to spare. Supported encryption cards, such as several from Hifn, are capable of significantly reducing CPU requirements. Captive portal - While the primary concern is typically throughput, environments with hundreds of simultaneous captive portal users (of which there are many) will require slightly more CPU power than recommended above. Large state tables - State table entries require about 1 KB of RAM each.  The default state table, when full at 10,000 entries, takes up a little less than 10 MB RAM. For large environments requiring state tables with hundreds of thousands of connections, ensure adequate RAM is available. Packages - Some of the packages increase RAM requirements significantly. Snort and ntop are two that should not be installed on a system with less than 512 MB RAM.   Hardware Compatibility List As pfSense 2.0.1 is based on FreeBSD 8.1, its hardware compatibility list is the same as FreeBSD's. The pfSense kernel includes all FreeBSD drivers. FreeBSD 8.1 Hardware Compatibility List pfSense 1.2.3 was based on FreeBSD 7.2, for that list, see: FreeBSD 7.2 Hardware Compatibility List