2

I am going to be setting up a router and NAT device but I am unable to choose between pfSense 2.x (FreeBSD 8) and RHEL 6.

The device will need to forward a medium (2k hosts) sized network where almost all the clients are NATed but a few will be using WAN assigned IP addresses. The router will not be a firewall. IPv6 support will eventually be needed.

The key performance sepcifications would be (unsorted):

  • number of concurrent NATed connections
  • throughput

This can be either out of the box performance or based on performance tweaks that are clearly (organized) documented.

If there is no clear way for me to decide which to use, except for a bake off, because I cannot find documentation on this. Is there any documentation, and if so where?

To clarify, I am asking for answers which are references to research on this issue that contains facts, references, or specific expertise, since my google fu has only resulting in:

It appears that there may be no noticiable performance differences, in that case features will be compared.

3
  • I'm curious as to why you're choosing the OS/software approach versus a purpose-built hardware device. It seems like a large network installation.
    – ewwhite
    Feb 3, 2013 at 19:00
  • the network is a lab network, and as such I do not get a budget, and thanks for adding the http prefixes, I am too new to SF. Feb 3, 2013 at 20:16
  • possible duplicate of Can you help me with my capacity planning?
    – user62491
    Feb 4, 2013 at 17:11

1 Answer 1

3

Both OSes can easily saturate the PCIe bus on modern CPUs, no meaningful difference in throughput.

I would assume Linux's NAT implementation can handle hundreds of thousands of concurrent connections, FreeBSD certainly can and I haven't heard of either claiming any significant superiority over the other recently.

The decision should come down to whichever you are more familiar with. If neither, pfSense has a web management GUI out of the box, but a similar system can be installed on almost and *nix system.

1
  • I will look at the two based on features then. Ex pfSense supports NAT address pools out of the box... Feb 4, 2013 at 4:10

Not the answer you're looking for? Browse other questions tagged .