As you guys know I am a huge fan of pfSense. I’ve been running it in my environment for several years and its just rock solid and reliable. The biggest issue is that although pfSense is community based and open sourced, it is ultimately still owned by Netgate and they are pushing their hardware to pfSense users at what I feel is a steep premium (and unnecessary). So with that in mind what is the best pfSense box for the money?

What is the Best pfSense Box?

We’re going to assume for the purposes of this article that we’re talking about home networking. If you’re interested in a business pfSense box check out our article on enterprise pfSense boxes.

Understanding AES-NI

A quick technical detail we need to cover.  There are a lot of boxes out there that claim to be pfSense compatible.  Technically any x86 device or PC is a compatible pfSense firewall.  They may not however be the best pfSense box if they lack support for AES-NI.  Simply put AES-NI is encryption service that are included in the die of most new processors.  This functionality drastically speeds up cryptography processes for SSL and VPN services.  Starting with version 2.4 pfSense will only run on hardware supporting AES-NI.  pfSense 2.3.x is still available but is end-of-life and not recommended.

In this rundown we will only included boxes that support AES-NI.

The No-Name Micro Firewall Appliance from Amazon

I’ve deployed many of these little boxes for friends and family and they work excellent.  They include the following specifications:

  • Intel Quad Core Atom E3845, 64 bit, 1.9GHz, 2MB L2 Cache
  • Full AES-NI hardware support
  • 4x Intel Gigabit Ethernet NIC ports
  • 32GB mSATA SSD
  • 1x USB 2.0
  • 1x USB 3.0
  • 1x RJ-45 COM (serial)
  • 1x VGA

My favorite thing about this little box is that it is 100% solid state and fan-less! It doesn’t make even a tiniest noise during operations.  It’s perfect for home use and very affordable. Get it here!

The QOTOM Q330G4 Firewall with Wi-Fi

The QOTOM Q330G4 is a beast of a little firewall for home users. Its a little more expensive than our first choice, but it comes with a much beefier processor and integrated Wi-Fi. Additionally it drops the VGA port in favor of an HDMI port.  Here’s the spec rundown for this little guy:

  • Intel Core i3-4005U Processor (3M Cache, up to 2.7 GHz, Broadwell)
  • Full support for AES-NI
  • 4GB DDR3 RAM; 32GB mSATA SSD; WiFi; No Operating System
  • 4 Gigabit LAN
  • 1 HDMI port
  • 2x USB 2.0 ports
  • 2x USB 3.0 ports

Many home users are not interested in running separate Wi-Fi access points (even though it is best practice) especially in smaller homes and apartments that don’t require larger coverage.  This device combines the power of pfSense in a small fully consumer friendly device.  Get it here!

The Netgate SG-3100

Some of you are going to want to stick to Netgate products since we know they will most likely remain 100% compatible through their usable life. There are examples of course where manufacturers dropped support for their own products before they were truly end-of-life (I am looking at you Apple!), the chances are pretty low.  The Netgate box while overpriced and under spec’ed is a solid box that should perform reliably enough.  It’s specs include:

  • ARM v7 Cortex-A9 @ 1.6 GHz Dual Core
  • 2X 1GB LAN/WAN ports
  • 4X 1GB Switched only ports
  • 2GB RAM
  • 8GB Storage
  • 1X USB

So that wraps up my pics for the best pfSense box for ordinary home users!  Happy pfSensing!

2 Responses

  1. billm

    I picked up an SG-2440 from my work for $50, but I’ve recently gotten gigabit fiber at home and the sg-2440 seems to top out at around 750/750 on a good day. Can the little no-name box keep up with gigabit?


Leave a Reply