Comments

876 comments

  • Avatar
    Firewalla

    We have an Eero WiFi 7's 10Gbit interface connected to the Gold 10G prototype :)

    5
    Comment actions Permalink
  • Avatar
    Rafal VVoo

    Strongly support SPF+ for WAN/LAN or at least for LAN as links to switches with 10G uplinks.

    @Firewalla, have you checked 10G RJ45/SFP+ combo ports with same MAC? Like:
    - 2x WAN 10G RJ45/SFP+ combo ports
    - 2x LAN 10G RJ45/SFP+ combo ports
    - 2x LAN 10G RJ45 ports

    3
    Comment actions Permalink
  • Avatar
    MGJ

    @Derek Seaman  I was not suggesting FW should have integrated wifi but to take advantage of a 10G capable router you need wifi7 unless you are lucky to have Cat 6a outlets but most people don't. Indeed wifi 7 routers are insanely expensive, like 3x wifi 6 devices so it will take a bit of time to make its way into homes.

    -1
    Comment actions Permalink
  • Avatar
    Firewalla

    I need to start a thread on WiFi 7 :) 

    CAT6 is more than enough for a 10Gbit wifi 7 connection. Just don't run it beyond 50 meters.

    0
    Comment actions Permalink
  • Avatar
    GK

    Will the chassis have an integrated power supply i.e. you attach 110V to unit directly OR is there an external power brick for AC/DC conversion? 

    Its too bad there is no wall mount option.  Most home users I expect do not have room for a rack inside their wall (recessed) media cabinet/ enclosure. So you are potentially limiting the buyer pool by not offering this option. 

    I am having a hard time deciding between waiting for this OR buying the existing gold plus. I don't really need 10Gbit ethernet for the foreseeable future, but I also feel the CPU in the gold/ gold plus is somewhat outdated and underpowered. Is there any chance you will do a CPU and memory and/or storage upgrade for the Gold plus, at a price point that sits between the gold plus and this 10Gbit unit?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Gold and Gold Plus are optimized for packet processing speed + deep packet inspection + heat + small form factor. Given these units are fanless, it is pretty hard to refresh them without considering adding a fan + bigger chassis + bigger PCB. 

    1
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    I’m in the SFP+ camp. If folks need rj45, there are plenty of modules for that.

    Rack mountable is a must. Powerful active cooling is a must.

    3
    Comment actions Permalink
  • Avatar
    GK

    @Firewalla - adding a fan and/or somewhat larger PCB+ chassis is OK I think.  It will still be smaller than this 10Gb unit.  It can be done - just look at the Intel NUC form factor - they are able to fit a gaming CPU+ even a GPU in that form factor. Price point can be higher than existing gold plus, but less than the 10Gb unit perhaps.

    I realize this may be off topic, but maybe there are others who want a refresh of the gold plus to add more compute horsepower + memory + storage etc. and maybe add 5Gbit capability?

    Are you saying there is no chance you will consider a refresh of the gold plus to bump up performance?  If yes, then I'll consider whether to sign up for the 10Gbit unit or not.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @Govind

    If you need a faster CPU/ bigger memory, the 10Gbit unit will fit your requirements. Even if you don't have 10gbit internet, a 2gigabit wireguard is pretty cool, so is segmenting VLAN's locally.

    We will need a lot more study to look at a faster gold plus with a fan; there is no answer for you at the moment. But one thing is certain: Firewalla units will be optimized as network firewalls/IDS/IPS; we will unlikely make them into a NUC. 

    1
    Comment actions Permalink
  • Avatar
    GK

    @Firewalla:  will the 10Gbit unit have a browser based gui/ console access, without having to use the serial port or a phone?  Also, what is the HDMI connector in your rendering used for?

    The phone access thing is OK at the lower price points, but at this price point it should have a proper web interface (via LAN port) for configuration, monitoring etc.

    Also, lets say we purchase a unit in the pre-sale and you then decide to cancel the project?  What happens to our "deposit"?

    Anyway, I did sign up.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    All the firewalla units run the same code base, so there is NO difference in how the unit is configured. We have my.firewalla.com and MSP (https://firewalla.net) available today, will we make another UI on the box mixed with the rest of the code base is a software feature that is not related to the Gold running 10Gbit.

    Please start or join the discussion here https://help.firewalla.com/hc/en-us/community/topics/115000356994-Feature-Requests

     

    1
    Comment actions Permalink
  • Avatar
    Rob Marles

    Put me in the SFP+ camp. It offers more flexibility for connectivity choices.

    Personally I use 10g fiber internally. I have no 10g copper support.

    I'd buy it if it supported SFP+, but without that, I'd have to spend more money to support 10g copper - I'd rather just pay more for a unit that supports it in the first place.

    0
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    Has anyone else had problems with posts being deleted?

    0
    Comment actions Permalink
  • Avatar
    Derek Seaman

    @Robert Kobbeman Yup..all but one of mine were censored. Very disappointing Firewalla censors posts. 

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    The censor is automatically done by Zendesk to prevent bots from posting stuff, spam, or based on a set of 'naughty' keywords, and sometimes I think it also take behavior into consideration too. Since there are so many of these exceptions, we often go through them once per week, and manually unlock them from the system. (usually Friday mornings)

    We only censor if you post something with personal identifiers (and not in the for sale channel). Or posting stuff look like SPAM of something not related to security/firewall

    Edit: Here is an example of the "censor" and why given by our admin

    @Derek, the reason for your post getting censored (automatically by the system) was you posted an article link pointing back to your own domain on the topic "Unleashing the Power of 6 GHz Wi-Fi: Re-Think Everything" in this thread, on January 28th (we have no insight on why Zendesk did this), I think this triggered more SPAM censors later. 

    1
    Comment actions Permalink
  • Avatar
    rogcisco

    @Firewalla. There have been multiple pleas from many current customers who expressed tremendous interest in SFP+. Is it possible to revisit and reconsider putting SFP+ in the spec?

    1
    Comment actions Permalink
  • Avatar
    Eric Sather

    I will just add, that since there seems to be a lot of people stuck on SFP+ that I am one who would prefer rj-45 especially if it allows them to hit a cheaper price point. I'm currently converting sfp+ to rj-45 and would love to get rid of that. 

    2
    Comment actions Permalink
  • Avatar
    Firewalla

    @rogcisco, for this release, we are stuck with RJ45, otherwise, we will not be able to build it in 2024 or early 2025. We do understand many of you want SFP+ ports (loud and clear), we are also a small team, so I can't really promise there will or will not be an SFP+ based firewalla in the future or not. 

    2
    Comment actions Permalink
  • Avatar
    Mark9

    I've kept quiet about SFP+ vs RJ45 ports, but definitely prefer RJ45 and wasn't sure I would purchase a SFP+ version.  So I'm in the crowd who cheers that you "are stuck with RJ45" for this release.

    I can also say that if you had a 6 port, higher cost version with 2 SFP+ and 4 RJ45, I would be happy with that too.  Who knows what the future will bring from you...

    3
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    @Firewalla,

    Is it safe to assume all four ports are configurable (LAN or WAN) like the current Golds?

    Some have fast WAN while others have heavy east/west traffic. This unit would be used many different ways.

    Thanks.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    All ports are "routable"; they can be LAN or WAN. 

    Yes, you can make the 10Gbit LAN ports and create a network to segment them off. In our prototype (the ugly box you see now) we connect one 10G to a switch (via RJ45 SFP+ adapter) and another 10G port goes to a Eero or Orbi WiFi 7, one 2.5gbit WAN port.

     

    1
    Comment actions Permalink
  • Avatar
    Sami

    Can you provide any further insights regarding the RAM or storage features on the unit?
    e.g. Will the RAM be upgradeable? Will there be a microSD slot for easy storage expansion? Or will an internal M.2 slot be available for upgrades? (hopefully PCIe, not SATA)

    Everyone’s covered the RJ45 vs. SFP+ pretty well. My other big question would be how much sustained load testing is being done with all 4 RJ45 ports running at 10Gbit? I’m concerned the heat generated by the RJ45-only prototype (enclosed in a cabinet with poor airflow similar to real world placement, not just sitting in open air with no chassis) would result in thermal throttling triggered on the CPU (ala reduced performance via downclocking) or if there’s an increase in P/L, errors on packet processing or similar. I think being ultra clear on required/preferred ambient temps + mobo/cpu thermal thresholds for this device will be necessary to avoid confusion. 

    0
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    Will the WiFi SD work with this model?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @Sami, please see the head of the post; the latest is there. The RAM part maybe 8GB if the price is right. 4GB is usually plenty, but at least one MSP/ISP wants the firewall to monitor 1000 or more devices for schools. As for the internals, as usual, we won't publish the details since they may change.

    The final thermal testing has not yet been done. (in theory, this should not be an issue) But the good news is we may pay for the NRE cost and start the board soon. We will have more data in a month (if we pay next week). The case + board sizes are not as restricted as the gold plus/se, so get thermal correctly is much easier. (relatively speaking)

     

     

     

    2
    Comment actions Permalink
  • Avatar
    Firewalla

    @robert, WiFi SD will work with this unit

    1
    Comment actions Permalink
  • Avatar
    Troy Barwick

    I’m good with RJ45 and I’m impressed you are testing with an Eero Max 7, I have 2 of them along with a POE6.  Oh and the rabbit ears, thank you!

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    The only problem we have with Eero 7 is finding a client that can drive that beast :) But it is pretty cool to have the majority of our backbone go to 10Gbit.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    Update:

    We will start the PCB design once everyone in ASIA is back to work and, in parallel, work on the discounts and manufacturing planning with our vendor. We will know in 15 to 30 days if we can launch or not. 

    5
    Comment actions Permalink
  • Avatar
    Firewalla

    Two artistic renderings of the "Gold Pro" (likely the final name of the unit, or Gold 10G). This was done a while back when pricing wasn't realistic.

    (and confirmed: we are going to make the PCB design sample now, we will be ready once price is right)

    3
    Comment actions Permalink
  • Avatar
    Zero Cool

    Gold Pro is the way to go.

    1
    Comment actions Permalink

Please sign in to leave a comment.