build your own passthrough device capable of PIA openVPN AES 256 SHA 256 RSA-4096

[mxnerd]

Aren't we taking about pfSense here? Why keeps bringing up DD-WRT?

 

[aigomorla]

http://www.amazon.com/Intel-D2500CC...442349068&sr=8-1&keywords=atom+dual+intel+lan

im using one of these guys as a router..

dual intel Lan's... atom based processor, can do x64:
http://ark.intel.com/products/59682/Intel-Atom-Processor-D2500-1M-Cache-1_86-GHz

just dont expect to load windows on it.... but its great for Pfsense / Smoothwall / IPCop

According to the first review:
Pros:
1- 2x Intel Gigabit LAN
2- Quad Serial port. 2 on board, 2 with headers
3- Customization using Intel Integrator Toolkit (Boot Logo, BIOS options, etc.)
4- Mini PCI-e (full and half size)
5- LVDS port. This port allows you to use a compatible LCD panels and an inverter directly

Cons
None actually, but some things could be improved.
1- They should have used a PCIe 4x instead of a PCI port
2- 4Gb memory limit. However you will probably run out of CPU power before needing more than 4gb.
3- Mini PCI-e should be compatible with mSATA


Ive been running it for almost 2yrs now.
I never need to reboot it, even after hammering it with torrents.
I have a family of 5, and they also hammer it.
With 4GB of Ram + 40GB Old Intel SSD, its way more then enough for a firewall / router box.

 

[Engineer]

http://www.amazon.com/Intel-D2500CC...442349068&sr=8-1&keywords=atom+dual+intel+lan

im using one of these guys as a router..

dual intel Lan's... atom based processor, can do x64:
http://ark.intel.com/products/59682/Intel-Atom-Processor-D2500-1M-Cache-1_86-GHz

just dont expect to load windows on it.... but its great for Pfsense / Smoothwall / IPCop

According to the first review:
Pros:
1- 2x Intel Gigabit LAN
2- Quad Serial port. 2 on board, 2 with headers
3- Customization using Intel Integrator Toolkit (Boot Logo, BIOS options, etc.)
4- Mini PCI-e (full and half size)
5- LVDS port. This port allows you to use a compatible LCD panels and an inverter directly

Cons
None actually, but some things could be improved.
1- They should have used a PCIe 4x instead of a PCI port
2- 4Gb memory limit. However you will probably run out of CPU power before needing more than 4gb.
3- Mini PCI-e should be compatible with mSATA

Good for now but possible future cons could be no AES-NI instructions or Intel QuickAssist. Still, nice price for a low power, dual Intel NIC board.

I'm wondering if that board will push 1Gbs ISP connection? Can be had for $94.xx after shipping NEW on eBay if people are inclined to save a few bucks!

(goes to Google)

Side note: Anyone try pfsense AND OPNsense? Which do you like better and why?

 

[mxnerd]

If OP is so paranoid, he should think using a Intel Compute Stick like devices and bring it with him. I think Archos, ASUS also has similar products, but all 2GB RAM only. If OP can wait, it's rumored that Intel will have 4GB device at year end.

http://www.pcworld.com/article/2930...pc-could-pack-a-bigger-punch-this-winter.html

 

[BirdDad]

If OP is so paranoid, he should think using a Intel Compute Stick like devices and bring it with him. I think Archos, ASUS also has similar products, but all 2GB RAM only. If OP can wait, it's rumored that Intel will have 4GB device at year end.

http://www.pcworld.com/article/2930...pc-could-pack-a-bigger-punch-this-winter.html

I fail to see how something like this can secure my internet connection

Aren't we taking about pfSense here? Why keeps bringing up DD-WRT?

because I tried DD-WRT with my routers and it did not allow me to use all 64 characters that PIA allows it only allowed me to use part of that and the other security stuff made it totally unusable.

 

[BirdDad]

I am looking on Intel's site I don't see where the Atom processor has AES at all.
Celeron it said no.

 

[mxnerd]

I am looking on Intel's site I don't see where the Atom processor has AES at all.
Celeron it said no.

ATOM with AES

http://ark.intel.com/search/advanced?s=t&FamilyText=Intel® Atom™ Processor&AESTech=true

http://ark.intel.com/search/advance...cessor for Smartphone and Tablet&AESTech=true

http://ark.intel.com/search/advance...om™ Processor for Communications&AESTech=true

http://ark.intel.com/search/advanced?s=t&FamilyText=Intel® Atom™ Processor for Server&AESTech=true



CELERON with AES

http://ark.intel.com/search/advanced?s=t&FamilyText=Intel® Celeron® Processor&AESTech=true

 

[mxnerd]

I fail to see how something like this can secure my internet connection

PIA VPN Client simple screen

PIA VPN Client Advanced, Encryption screen.

You run PIA's VPN client on the Compute Stick then share the WiFi with other computers.

Your connection then is secured.

If PIA provides you 64 chars password, you should be able to enter here.

=====

Share Private Internet Access VPN With All Your Wireless Devices

https://www.privateinternetaccess.c...net-access-vpn-with-all-your-wireless-devices

=====

I have no idea whether PIA's VPN client will take advantage of ATOM's AES capability.

=====

Regarding pfSense's OpenVPN 64 chars password support, you really need to ask PIA, I'm not PIA customer.

I only use free VPN to watch videos in other countries or post comments.

because I tried DD-WRT with my routers and it did not allow me to use all 64 characters that PIA allows it only allowed me to use part of that and the other security stuff made it totally unusable.

You either use it in DD-WRT, pfSense or on computer, not all at once.

If DD-WRT doesn't work, just don't use it! Use it either in pfSense or computer.

 

[sdifox]

I am looking on Intel's site I don't see where the Atom processor has AES at all.
Celeron it said no.

Exactly how fast is your internet connection? Unless you are on gigabit, you don't need a gigabit throughput from your firewall.

 

[BirdDad]

PIA VPN Client simple screen

PIA VPN Client Advanced, Encryption screen.

You run PIA's VPN client on the Compute Stick then share the WiFi with other computers.

Your connection then is secured.

If PIA provides you 64 chars password, you should be able to enter here.

=====

Share Private Internet Access VPN With All Your Wireless Devices

https://www.privateinternetaccess.c...net-access-vpn-with-all-your-wireless-devices

=====

I have no idea whether PIA's VPN client will take advantage of ATOM's AES capability.

=====

Regarding pfSense's OpenVPN 64 chars password support, you really need to ask PIA, I'm not PIA customer.

I only use free VPN to watch videos in other countries or post comments.

How does that secure my wired connections which are my primary concern?

 

[rchunter]

Yup, unless you have super fast internet OP your dual core 1ghz router should work fine. Just set encryption down to AES128 if you have to.
AFAIK PIA won't even let you adjust encryption level higher than AES128 in Openvpn client anyway. Only if you use their client application. At least that's how it used to be.... They might have changed all that I don't know. I haven't really been paying attention....

EDIT. You should be able to pull 40-50Mbit/sec openvpn speeds with your Asus RT-AC87R. If you can't you should try a different server. Also maybe try switching off QOS if you have it on.

 

[mxnerd]

How does that secure my wired connections which are my primary concern?

You can buy 2 USB ethernet adapters and attaches them to Compute Stick and connect one adapter to the router, and connect the other adapter and other devices to another switch.

and share your VPN using ICS feature in Windows

http://windows.microsoft.com/en-us/windows/using-internet-connection-sharing#1TC=windows-7

http://www.ibvpn.com/billing/knowledgebase/53/Internet-Connection-Sharing-on-Windows-7.html

 

[Engineer]

Exactly how fast is your internet connection? Unless you are on gigabit, you don't need a gigabit throughput from your firewall.

If I'm putting together a pfsense box right now, I would go with the AES-NI at least (and QuickAssist if possible) just to future proof stuff.

 

[BirdDad]

the N3150 seems the way to go but I am having trouble finding a motherboard with 2 NICs, they all seem to have just one
I suppose I could add one to the pci-e slot but am not finding any that would fit itx would low profile work or does it have to be something special?
I don't like the idea of using USB adapters
what is quick assist?
with the kind of hardware that I am putting into this I might as well be running windows 7 or 8.1 on the thing.

 

[BirdDad]

http://windows.microsoft.com/en-us/w...#1TC=windows-7
all that says is using ics need more help

 

[sdifox]

If I'm putting together a pfsense box right now, I would go with the AES-NI at least (and QuickAssist if possible) just to future proof stuff.

Vmware or hyperv

 

[sdifox]

the N3150 seems the way to go but I am having trouble finding a motherboard with 2 NICs, they all seem to have just one
I suppose I could add one to the pci-e slot but am not finding any that would fit itx would low profile work or does it have to be something special?
I don't like the idea of using USB adapters
what is quick assist?
with the kind of hardware that I am putting into this I might as well be running windows 7 or 8.1 on the thing.

Exept pfSense runs on FreeBSD.

 

[Engineer]

Vmware or hyperv

Not quite sure I follow what you mean by this?

 

[sdifox]

Not quite sure I follow what you mean by this?

Get baremetal server, allocate as much cpu ram as the pfsense needs to achieve throughput you want.

Like I do :awe:

 

[mxnerd]

@OP

You can go with N3700 based system, which has AES support too. A bit more powerful than N3150.
http://www.newegg.com/Product/Product.aspx?Item=N82E16813157626

You can buy any one port or dual port PCIE x1 ethernet card. I don't recommend you buying x4 card, because all N3150/N3700 motherboard x1 pcie slots are all close ended, you have to use tools to cut it open in order to fit x4 cards. If you are not careful enough, you could damage the slot.

=====
ICS config.

So let's say you have everything in place, then you have ethernet1, ethernet2 and a virtual TAP Windows adapter v9 (OpenVPN) which is created by PIA VPN client software.

suppose ethernet1 is the one connectect to modem/router, then you click TAP adapter, properties, sharing, then choose ethernet2 as the adapter you want to share, which will get default IP 192.168.137.1 and it will hand out DHCP IP addresses in 192.168.137.0 ranges.

Once you use PIA VPN client to connect to PIA, then all devices connected to the system use the VPN tunnel to access the internet.

=====

If you want to use the new system as pfSense appliance, you can too.

Or like sdifox always recommended, run a virtual pfSense machine in VirtualBox, VMware or Hyper-V.

sdifox is more experienced with pfSense, especially running it in a VM.

 

[Engineer]

@OP

You can go with N3700 based system, which has AES support too. A bit more powerful than N3150.
http://www.newegg.com/Product/Product.aspx?Item=N82E16813157626

You can buy any one port or dual port PCIE x1 ethernet card. I don't recommend you buying x4 card, because all N3150/N3700 x1 pcie slots are all close ended, you have to use tools to cut it open in order to fit x4 cards. If you are not careful enough, you could damage the slot.

As long as you're OK with Realtek ports for your dual x1 PCIe card as you can't (that I can find) get an Intel dual port NIC that runs on PCIe X1 (although, as I've said, you can modify it to run or buy an adapter to run it at X1 speed (should be fine for bandwidth).

Not sure why Intel gave the Atom C2558 and C2758 PCIe 8X lanes and QuickAssist and only gave AES-NI and 4 lanes in the newer N3150 and N3700 stuff (unless it's to save power).

 

[mxnerd]

As long as you're OK with Realtek ports for your dual x1 PCIe card as you can't (that I can find) get an Intel dual port NIC that runs on PCIe X1 (although, as I've said, you can modify it to run or buy an adapter to run it at X1 speed (should be fine for bandwidth).

Did find one dual port adapter using intel I350 chip, but it's from China and a brand that never heard of.

http://www.dx.com/p/winyao-wyi350t-...etwork-card-adapter-intel-i350-chipset-286956

====

Another one using intel 82540, and cheaper.

http://www.ebay.com/itm/INTEL-82540...-1000M-Card-/151726955194?hash=item2353a19aba

 

[Engineer]

Did find one dual port adapter using intel I350 chip, but it's from China and a brand that never heard of.

http://www.dx.com/p/winyao-wyi350t-...etwork-card-adapter-intel-i350-chipset-286956

====

Another one using intel 82540, and cheaper.

http://www.ebay.com/itm/INTEL-82540...-1000M-Card-/151726955194?hash=item2353a19aba

Wow, I've searched for hours for those and couldn't find one. Your Google (or whatever) search skills make me look weak!

I would have probably opted for a cheaper motherboard (instead of SuperMicro) and gotten one of those instead (I350 is server chipset, IIRC).

 

[mxnerd]

Wow, I've searched for hours for those and couldn't find one. Your Google (or whatever) search skills make me look weak!

Haha, I like to use any many as keyword as possible. And after text results came out, I will also click image search results to cross check. It makes searching a lot faster.

 

[Engineer]

Haha, I like to use any many as keyword as possible. And after text results came out, I will also click image search results to cross check. It makes searching a lot faster.

The 82540 is interesting in that is has two separate chipsets on one PCIe card. Pretty cheap and from what I can tell, it's supported by pfsense (states FreeBSD 7.0 or higher on the eBay link and pfsense is at FreeBSD 10 IIRC)