build your own passthrough device capable of PIA openVPN AES 256 SHA 256 RSA-4096

[BirdDad]

My dual core router is not powerful enough to run openvpn with aes256 and sha256 and rsa-4096 not to mention the fact that it uses a shortened password
when am I going to be able to use the full password allowance?

 

[sdifox]

Go pfsense?

 

[mxnerd]

You are not a banker, why do you need the maximum protection?

No one is going to spend days to hack your connection.

 

[rchunter]

Why do you feel you need all traffic going through a vpn? If so ditch the router. pfsense FTW.

 

[dave_the_nerd]

What kind of router? "Dual core" covers a lot of ground.

 

[Mushkins]

Quad Core routers aren't coming to the home buyer market anytime soon. There's absolutely no need for that kind of horsepower in a home application at this time.

If you want to run enterprise technologies (I dont know why you want to run all that at home), buy enterprise equipment.

 

[Gryz]

Are you sure you have performance problems because of AES256 ?
Are you sure it is because of lack of CPU power and not something else ?
Modern CPUs have hardware support for encryption (via a special instruction set). I'm not sure if only Intel/AMD cpus have that, or also other families of CPUs.
It might be better to build/buy routers with processors that have hardware encryption support.
And you need to make sure that the software (firmware) is actually using that hardware support.

Quadcore CPUs are usually general-purpose CPUs. If you want a high-end general-purpose CPU, you'll probably pay a lot of money for functionality and performance you will never use on a router. Router vendors should pick the right tool for the right job. Not just slap an expensive CPU in it (price and power usage wise).

 

[BirdDad]

what routers support hardware AES 256? I am not aware of any.
pfsense seems to be the right thing but what CPU? I don't want one that will clobber my electric bill.
And the ability for it to switch from one openVPN to another when the main is down would be really nice too.
low on power useage but a lot of horsepower is what I need something small.
And the ability to use a USB3.0 harddrive without having to give the login/ password of the router would be good too(I don't know how to do that with the routers that I have mostly ASUS).
Thanks for the replies

 

[SwiftWind]

Look for a processor that supports AES-NI. See here for more info: https://en.m.wikipedia.org/wiki/AES_instruction_set

 

[Cerb]

pfsense seems to be the right thing but what CPU? I don't want one that will clobber my electric bill.

Core i3 41XX, on a MiniITX board, with a PicoPSU; or the Antec ISK-3X0, with its integrated PSU?

You will not likely use over 30W from the wall at idle, with a USB stick or SSD for the OS disk, and depending on mobo, under 20W may be possible.

You can use quad Atoms, too, which will use less power, but they can be iffy when it comes to getting more than a few Mbps in and out, encrypted.

 

[sdifox]

What is it you are doing and what is your current setup? Reason I am asking is if you have a vm host then you would just create a pfsense vm and give it more vcores and memory.

 

[BirdDad]

I just want my family protected from identity thieves and hackers and from finding our location from our IP address(I have a young daughter of whom I do not even post pics on Facebook of her because I don't want her to become a target).
I am thinking of pfsense in a small case that sits between the router and modem and encrypts all the traffic to and from the connection.
If pfsense can let me switch between two different openVPN connections then this is what I need. Can it run PIA connections?

 

[sdifox]

I just want my family protected from identity thieves and hackers and from finding our location from our IP address(I have a young daughter of whom I do not even post pics on Facebook of her because I don't want her to become a target).
I am thinking of pfsense in a small case that sits between the router and modem and encrypts all the traffic to and from the connection.
If pfsense can let me switch between two different openVPN connections then this is what I need. Can it run PIA connections?

https://www.privateinternetaccess.com/pages/client-support/pfsense

 

[BirdDad]

I have an ASUS RT-AC87R router that I really like but it cannot do the encryption adequately enough even with Merlin or dd-wrt.
dd-wrt only uses passwords that are less than 32 characters long. And I believe that Merlin is the same way.

 

[mxnerd]

Intel N3150 CPU based motherboard/barebone system might be what you want.

http://www.newegg.com/Product/Produ...r=BESTMATCH&Description=N3150&N=-1&isNodeId=1

N3150 is quad core, low pwer, and has AES-NI data encryption feature, but I don't know if OpenVPN supports the feature.

http://ark.intel.com/products/87258/Intel-Celeron-Processor-N3150-2M-Cache-up-to-2_08-GHz

 

[sdifox]

Have tou looked at TOR?

 

[BirdDad]

Have tou looked at TOR?

I am not a pirate and we do not download porn. That's the only things I can see the tor network to be useful for since we do not live in an overly (yet) oppressive country. Besides tor has a lot of latency.

 

[Engineer]

what routers support hardware AES 256? I am not aware of any.
pfsense seems to be the right thing but what CPU? I don't want one that will clobber my electric bill.

Intel N3700 is a quad core that uses 6W and includes AES-NI instruction set. Pushes above 2Gbps seconds in pfsense tests using AES-NI (OpenVPN to add soon). Intel N3150 also a good choice.

Edit: Already posted above on the N3150 (sorry about that).

Future versions of pfsense are looking at adding Intel QuickAssist which could push AES-256 past 40Gbps rate with higher end processors. QuickAssist and AES-NI are included in some of the Bay-Trail Atom processors (4 and 8 core lower power versions).

I'm building a pfsense N3700 board as soon as I get the SuperMicro board. Overkill I know but I wanted to build something like this for a long time and I wanted it to be somewhat future proof (over 1Gbps with multiple ports for possible link aggregation to the switch if I so choose). I'll let you know the power it pulls at the wall when I get it running (waiting on SSD and board/cpu combo).

SuperMicro N3700 board with 4 Intel Gbs lan ports
8GB (2 x 4GB) of 1600 DDR3L 1.35V ram
128GB Sandisk SSD
Antec ISK-110 case with built in fanless 90W supply (92% efficient)

(I know I don't need the ram and SSD but since they were so cheap ($36 for ram and $35 for SSD), I thought what the hell. Lots of room for future expansion)

 

[Engineer]

Intel N3150 CPU based motherboard/barebone system might be what you want.

http://www.newegg.com/Product/Produ...r=BESTMATCH&Description=N3150&N=-1&isNodeId=1

N3150 is quad core, low pwer, and has AES-NI data encryption feature, but I don't know if OpenVPN supports the feature.

http://ark.intel.com/products/87258/Intel-Celeron-Processor-N3150-2M-Cache-up-to-2_08-GHz

OpenVPN does not yet (AES-CGM only). It's reported that a later version will.

As for those board, would be preferable to have dual Intel NIC's. That can be added via a PCIe 4X card cheaply (HP branded Intel dual card can be had for $15 bucks shipped via eBay) but many of the boards only have a 1X PCIe slot. The slot or card can be modified to probably work but the 1x PCIe is no guarantee (should work) but could be a bottleneck on true 1Gbs connections.

 

[BirdDad]

Thanks everybody for the useful replies.

 

[BirdDad]

OpenVPN does not yet (AES-CGM only). It's reported that a later version will.

As for those board, would be preferable to have dual Intel NIC's. That can be added via a PCIe 4X card cheaply (HP branded Intel dual card can be had for $15 bucks shipped via eBay) but many of the boards only have a 1X PCIe slot. The slot or card can be modified to probably work but the 1x PCIe is no guarantee (should work) but could be a bottleneck on true 1Gbs connections.

Thanks for the nfo I was about to buy it.

 

[Engineer]

Thanks for the nfo I was about to buy it.

Even the ones with X16 slots (size) are x1 slots if you read the details. The cards will fit and work but could be slower. I do think a X1 (bandwidth) slot will have enough bandwidth for 2 - 1Gbps Intel lan ports from what I've read. Most of the cards have a x4 physical size though.

What you can do, however, is to buy two single Intel NIC cards which have PCIe x1 interfaces and plug them into the mATX boards that have multiple PCIe slots available. Bigger board but at least you're sure to get the full 1Gbps without worry.

 

[sdifox]

I am not a pirate and we do not download porn. That's the only things I can see the tor network to be useful for since we do not live in an overly (yet) oppressive country. Besides tor has a lot of latency.

If it is privacy you want, TOR is fine. Or maybe look into i2p

 

[mxnerd]

Though the N3150 motherboard PCI-E v2.0 x1 slot supports "only" up to 500MB/s, it's plenty for internet activity.

 

[Engineer]

Though the N3150 motherboard PCI-E v2.0 x1 slot supports "only" up to 500MB/s, it's plenty for internet activity.

If you can find a dual Intel Gbps NIC with X1 interface. You can find Realtek and they will work but with mixed results and much lower than 1Gbps in tests. Might be good enough for the OP though.

You could also:

Modify the X4 card by cutting off the correct amount of the slot insert so it fits the X1 slot

Modify the X1 slot by cutting out the back side so the X4 card will fit

Buy a mATX board and plug the X4 card into the X16 slot (running at X1 speed).

500MBps is good enough for the 2 - Full Duplex Gbps ports and that would be about it.