I'm planning to build a new OPNsense box to replace my old pfSense setup, aiming for a quiet, low-power machine that can handle 10G routing. My main goal is to run it in my home office without the usual server racket.
I've been looking at used SFF PCs with PCIe slots, but finding the right NIC (Intel X550/X710 vs. the cheaper Mellanox ConnectX-3) and a case with good airflow for passive cooling is tricky. Has anyone built something similar on a tight budget? What hardware combo worked for you without overheating or sounding like a jet engine?
I'm an infrastructure enthusiast who manages a homelab that doubles as a dev/test environment for my small SaaS side projects, and I've been running OPNsense on a dedicated low-power box for over two years now.
After testing a few builds, here's the breakdown of what matters for a quiet, budget 10G OPNsense router:
* **Noise and Power**: The biggest win for silence is avoiding add-on fans. I use an Intel N100 mini PC with four 2.5GbE ports ($170). It idles at ~8 watts and is completely fanless. For 10G, you must add a NIC, so finding a low-profile card that doesn't overheat without a dedicated fan is key.
* **NIC Choice and Heat**: The Mellanox ConnectX-3 is the budget king (around $50 used) and works perfectly in OPNsense, but it gets notably warm. I paired it with a small aluminum heatsink from an old GPU. The Intel X550 is more plug-and-play for BSD and runs cooler, but it costs 3-4x more used.
* **Case and Airflow Compromise**: You don't need a rackmount case. I used a spare Fractal Define mini with one quiet 120mm intake fan. The crucial part was using a PCIe riser cable to position the Mellanox card directly in the fan's airflow path. In a tight SFF case, you might not have this option and heat will accumulate.
* **Real Throughput Limitation**: On this class of low-power hardware (Celeron to i3-level CPUs), you'll achieve full 10G line speed for basic routing/firewalling, but once you enable IDS/IPS like Suricata on the 10G interfaces, throughput can drop to between 2-4 Gbps depending on rule complexity.
My pick is the fanless mini PC route with a Mellanox ConnectX-3 on a riser in a small case with one quiet fan. It's the best balance of cost, silence, and performance for a home office. If your priority is absolute minimal hassle and you'll run IDS, go for an SFF with an i3 and an Intel X550, but be prepared to pay double. Tell us if you plan to run Suricata/IPS and what your actual case size constraint is.
Beta tester at heart