Overclock.net › Forums › Software, Programming and Coding › Networking & Security › pfsense on a mid-2011 Mac Mini with Thunderbolt Ethernet adapter?
New Posts  All Forums:Forum Nav:

pfsense on a mid-2011 Mac Mini with Thunderbolt Ethernet adapter?

post #1 of 8
Thread Starter 
After trying several routers, the only router that I could find that could almost handle my gigabit Internet connection was the ASUS RT-N66U. Still, though, I lose about 50Mbps on my Speedtests and, more importantly, as soon as I try DD-WRT or Tomato, the throughput drops precipitously (to around 200-300Mbps).

I do, however, have a Mid-2011 Mac Mini (Core i5, 16GB RAM, Thunderbolt port). Is there any way I can run pfsense on my Mac Mini, using the built-in NIC and the gigabit Thunderbolt Ethernet adapter, and get full throughput? I tried running pfsense in virtualization on the Mini, both in Virtualbox and VMware, but could only get about 250Mbps out of the former and about 350Mbps out of the latter. I noticed that Virtualbox was using tons of CPU when running a speedtest, suggesting that the NIC virtualization was too CPU intensive and maybe causing the problem, but VMware only performed a little better and did not show signs of excessive CPU use, either in Activity Monitor on the Mac or inside the VM according to top.

Does anyone have any ideas as to whether I might be able to get the Mac Mini to work as a gateway with full throughput? Any way I can get it working with suitable performance in virtualization? If I run pfsense natively on the hardware, is there any way to recognize that Thunderbolt Ethernet adapter? Alternatively, is there anything I can run natively in OSX (10.8) that could do what I want (while still providing a decent interface--I don't really want to have to dig into a config file every time I want to forward a port)?

While I do have a spare computer that runs pfsense flawlessly, the Mac Mini uses much less power and has a much smaller footprint, making it more suitable for leaving it permanently running in my living room. My behemoth of a spare machine is a very last resort.

Edit: I did try using the simple, almost inconfigurable Internet Sharing, and did get the full throughput. The built-in sharing is woefully inadequate for what I want (if I wanted that, I'd just keep using my RT-N66U), but it demonstrates that the network interfaces can handle the throughput.
post #2 of 8
Hi, ingjald,
I realize this is an old post, but I don't know if you ever found an answer to your question, and I found this during a Google search for the exact same thing. Surprisingly there don't seem to be any answers…

Anyhow, I've successfully set up a pfSense virtual machine on a 2011 Mac Mini Server, using a thunderbolt to gigabit adapter, using VirtualBox, and it works like a dream. I'm using the Mini's built-in ethernet as the WAN, and the thunderblot adapter as the LAN. Not that it makes a difference, it's just my personal preference.

The vm is set to use 512mb of RAM (you might get by with as low as 128mb, and you'll need a full 3Gb if you're running Snort with lots of rules) and a 2Gb virtual disk. Everything else is stock VirtualBox settings for FreeBSD, pretty much.

In the virtual machine's settings, you'll want to use bridged adapters for both ports for your pfSense instance, and you can leave them set to 'connected'.

Using the port arrangement I mentioned above, when configuring pfSense after your install, the WAN will be em0, and the LAN will be em1. You'll want to use this for both your VLAN and regular settings.

Of course, pfSense also displays the MAC address for each detected port, so you can match that to the MAC addresses assigned by VirtualBox to your vm's adapters.

So long as DHCP and firewalling for your modem are disabled (if your modem is in true bridge mode), your Mac Mini will be assigned its IP address by pfSense on the thunderbolt to gigabit adapter, as will any downstream networking devices which are connected to that adapter. If you have more vms to run (such as web servers, and I have a few Debian instances behind my pfSense install), so long as you confgure them to use bridged adapters on the thunderbolt to gigabit adapter in their network settings, they will also be routed and firewalled by pfSense.

I have a tutorial written up, complete with screeshots, for the entire process, which is quite easy after you've done it once or twice. Eventually, I'll find time to put it on the web. In the meantime, I hope this helps...
Edited by Antonio-Malcolm - 12/16/12 at 7:10pm
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
post #3 of 8
@Antonio

Did you ever try running pfSense natively on the Mac Mini? Can it detect the hardware correctly?
Mythica
(14 items)
 
  
CPUMotherboardGraphicsRAM
Intel i3 530 Gigabyte GA-H55M-D2H Palit nVidia GT430 Corsair Dominator 4GB TW3X4G1333C9A 
Hard DriveHard DriveOSMonitor
Hitachi Deskstar 7K500 Samsung HD204UI Linux Mint 13 HP L1800 
KeyboardPowerCaseMouse
Trust EasyScroll Silverline Corsair HX520 Lian-Li PC-A04B Logitech Trackman Wheel 
  hide details  
Reply
Mythica
(14 items)
 
  
CPUMotherboardGraphicsRAM
Intel i3 530 Gigabyte GA-H55M-D2H Palit nVidia GT430 Corsair Dominator 4GB TW3X4G1333C9A 
Hard DriveHard DriveOSMonitor
Hitachi Deskstar 7K500 Samsung HD204UI Linux Mint 13 HP L1800 
KeyboardPowerCaseMouse
Trust EasyScroll Silverline Corsair HX520 Lian-Li PC-A04B Logitech Trackman Wheel 
  hide details  
Reply
post #4 of 8
Thread Starter 
What kind of throughput are you getting? While I had no problem setting up pfsense in VirtualBox, I couldn't get more than about 350Mbps out of it.
post #5 of 8
Quote:
Originally Posted by parityboy View Post

@Antonio
Did you ever try running pfSense natively on the Mac Mini? Can it detect the hardware correctly?

I'm not certain how well it would work natively, with the thunderbolt adapter. It depends on whether or not FreeBSD has support for thunderbolt, and has the proper Broadcom drivers available. It's a Broadcom BCM57762 chip inside the adapter, specifically, IIRC.

I probably won't try this, as with a quad-core i7 CPU, 16Gb of RAM, and dual hard drives, I'm thinking that dedicating the entre machine to pfSense would be a bit of overkill wink.gif

BTW, love the avatar. That is a fantastic show.
Quote:
Originally Posted by ingjald View Post

What kind of throughput are you getting? While I had no problem setting up pfsense in VirtualBox, I couldn't get more than about 350Mbps out of it.

I haven't tested throughput yet (add Iperf to the list of packages I need to install and test with this weekend), but from my current usage (serving up a website or two, working from home with big data from a dev database over the net, as well as SVN) I have absolutely no slow down, vs being directly connected to the internet. Of course, that's not real testing, even if it's very reassuring. I'll install Iperf tonight or tomorrow and run some real tests.

So far, I'm impressed with how well it performs, with all of the capabilities it offers. It's quite robust. The guys who built pfSense must be really, really smart.
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
post #6 of 8
@Antonio

One thing I've noticed with pfSense is that when running it in a VM, if the disks are busy it has sync timeouts and sometimes doesn't recover. This is with VirtualBox - I've never ran it under VMware.
Mythica
(14 items)
 
  
CPUMotherboardGraphicsRAM
Intel i3 530 Gigabyte GA-H55M-D2H Palit nVidia GT430 Corsair Dominator 4GB TW3X4G1333C9A 
Hard DriveHard DriveOSMonitor
Hitachi Deskstar 7K500 Samsung HD204UI Linux Mint 13 HP L1800 
KeyboardPowerCaseMouse
Trust EasyScroll Silverline Corsair HX520 Lian-Li PC-A04B Logitech Trackman Wheel 
  hide details  
Reply
Mythica
(14 items)
 
  
CPUMotherboardGraphicsRAM
Intel i3 530 Gigabyte GA-H55M-D2H Palit nVidia GT430 Corsair Dominator 4GB TW3X4G1333C9A 
Hard DriveHard DriveOSMonitor
Hitachi Deskstar 7K500 Samsung HD204UI Linux Mint 13 HP L1800 
KeyboardPowerCaseMouse
Trust EasyScroll Silverline Corsair HX520 Lian-Li PC-A04B Logitech Trackman Wheel 
  hide details  
Reply
post #7 of 8
@parityboy

I haven't run into any such issues yet... could be that my primary drive is an SSD.
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
post #8 of 8
Quote:
Originally Posted by ingjald View Post

What kind of throughput are you getting? While I had no problem setting up pfsense in VirtualBox, I couldn't get more than about 350Mbps out of it.

Ok, guys, I've installed iperf, and here are my test results.

When testing against my external IP (static IP assigned by Comcast), which hits the pfSense vm, I'm topping out at 525Mbps, averaging 522Mbps, without Snort running. With Snort, I max out at 518Mbps, 515Mbps average.

Between two physical machines on my network, routed by the pfSense VM, tests topped out at 944Mbps, with an average of 941Mbps.

Between my workstation (a physical machine) and a Debian vm placed on another machine, connected to the network via a bridged adapter, test results maxed out at 907Mbps, and averaged 900Mbps.

These speeds make sense, with gigabit ethernet, and I think confirm pfSense isn't causing any slowdowns. At least none which would be noticeable in real-world use.
BTW, if you're running Snort, you'll want 3Gb of RAM dedicated to the vm, or you could assign more swap space, I suppose.
Edited by Antonio-Malcolm - 12/17/12 at 12:21pm
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
Loki
(9 items)
 
Odin
(13 items)
 
Thor
(7 items)
 
CPUGraphicsRAMHard Drive
2.3 GHz Core i7 2820QM Radeon HD 6750M Elpida 16Gb RAM kit 480Gb Kingston SSDNow KC100 
Optical DriveOSOSMonitor
Matshita UJ-868 Dual-Layer DVDRW Mac OS X v10.8 Windows 7 (Parallels) LG High-Res Anitglare 1650 x 1050 LCD (built-in... 
Monitor
2 x Vizio E220MV 22-Inch 1080p LED LCD HDTV 
CPUGraphicsRAMHard Drive
2.0GHz Core i7 2635QM Intel HD Graphics 3000  Patriot Signature 16Gb RAM Kit 128Gb OCZ Vertex SSD 
Hard DriveHard DriveOSOS
500Gb Seagate Momentus 7200rpm 1.5Tb OWC Mercury Elite Pro Qx2 RAID Kit (exter... Mac OS X v10.8 pfSense (VirtualBox) 
OSMonitorKeyboardMouse
Debian (VirtualBox) Vizio E220MV 22-Inch 1080p LED LCD HDTV Apple USB Keyboard Rapoo 3500 Wireless Mouse 
Other
Apple Thunderbolt to Gigabit Ethernet Adapter 
CPUGraphicsRAMHard Drive
50MHz Motorola 68030 with 50MHz 68882 FPU Advanced Graphics Architecture (AGA) Chipset 64Mb SDHC to IDE Adapter with SanDisk Extreme 8Gb SDHC 
MonitorKeyboardOther
Samsung 720p HDTV Built-in Keyboard PCMCIA Wireless Card 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Networking & Security
Overclock.net › Forums › Software, Programming and Coding › Networking & Security › pfsense on a mid-2011 Mac Mini with Thunderbolt Ethernet adapter?