Comments

876 comments

  • Avatar
    Ram!

    @firewalla looks good and the spf+ version will be named : Gold Pro+

    0
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    Out of curiosity, will the Firewalla be able to process packets fast enough to handle all ports running full tilt at full duplex? This would be 50gbs. I know this isn’t a switch, but a switch would normally have backplane bandwidth that supports all ports at full bandwidth at full duplex.

    0
    Comment actions Permalink
  • Avatar
    randallzapata

    I think you need two sfp+ as well so fiber can be used.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @robert, the throughput for a firewall is usually quoted on how much data can be processed. Say you are splitting your WAN into two ports, one 10Gbit and one 2.5Gbit; currently, we can guarantee the total bandwidth is 10Gbit. (It is highly possible in the final version; once we get the hardware, we can push it to 11 or 12.5Gbit). If you are talking about pushing 10Gbit up and 10Gbit down simultaneously, this is 20 gigabits, which this unit can not do. 

    1
    Comment actions Permalink
  • Avatar
    rogcisco

    @Firewalla. I thought the backplane can do line rate for plain L2 switching for all 5 ports with no rules, 10gbps performance for L3/IPS/IDS/rule. Isn’t it the case?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @rogcisco

    This is a router (layer 3 device) with 4 fully routable interfaces; so this is really no "switching" backplane or a switching chip

    2
    Comment actions Permalink
  • Avatar
    Adem Darguner

    Interface speeds must work with a minimum of 2 pieces of 1/10 copper. The other ports should have 2 or 4 POE+ 1/2.5G.But there shouldn't be internal WIFI. It increases the cost.  Firewalla can have 8GB ram for more connectivity. If 10Gbps performance is considered, it should be in a corporate product. Yes. It should be under 1000 dollars. If the price is between 600-700 USD, it will be sold well.  We are waiting for the launch.

    0
    Comment actions Permalink
  • Avatar
    Darin Jensen

    My ISP also uses SFP+. Would be great to have it!

    0
    Comment actions Permalink
  • Avatar
    Eibensl

    Specs look really good and I like the white / gold.  Keeping the unit rack mountable is a must, All RJ45 is fine; SFP+ ports would be nice, but not a show stopper.  I don't need POE support on a router; supporting via switches.  My wired network is currently running at 10gbps and I have some TP-Link Omada EAP783's inbound to upgrade my wireless to WiFi 7; I'm excited that there will be a Firewalla coming out that can support above 2.5gbps.  

     

    0
    Comment actions Permalink
  • Avatar
    Andy

    @firewalla I think the more colorful version looks better. Please give us the best pre-production price so my wife doesn’t divorce me! ;-)

    0
    Comment actions Permalink
  • Avatar
    Andy

    @firewalla in your testing, are you doing max traffic between 2 ports with basic NAT or are you doing full inspection and other services between 2 ports? It will be interesting to see the testing results with 4 ports in use. I also worked at Spirent in past so have a device testing background.

    0
    Comment actions Permalink
  • Avatar
    Anders Ripa

    I really like it!
    Make sure that transferring configuration works smoothly from existing Gold system.

     

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @andy, we will publish more performance test results once we get the real board back. 

    3
    Comment actions Permalink
  • Avatar
    Firewalla

    Update:

    • PCB + Board started, hopefully, we get something back by mid-March.
    • Our boss is meeting our vendor's boss in person today, and hopefully, they can move pricing forward. Or at least give pre-sale a bigger discount. 

     

    6
    Comment actions Permalink
  • Avatar
    Eibensl

    @firewalla: If the final unit remains at 8" wide, will the optional mounting brackets include keystone ports so that the remaining space can be used as a patch panel?...rack space is limited.

    2
    Comment actions Permalink
  • Avatar
    Steven Van Dyke II

    @Eibenal, that is a great idea and would love to see @firewalla do that to help save space.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    We have not fully designed the rabbit ears yet. It will depend on the metal mold cost. (a simple plate is going to be cheaper to build than those with patch panels) They can drive the selling price over 50 dollars if we are not careful. (A simple plate should be around $20)

    2
    Comment actions Permalink
  • Avatar
    Steven Van Dyke II

    @firewalla, is it possible to build both? I would pay a extra to have ears that had keystones vs a blank plate.

    0
    Comment actions Permalink
  • Avatar
    Troy Barwick

    I would prefer rabbit ears without the patch panel, myself.

    1
    Comment actions Permalink
  • Avatar
    Firewalla

    We can only build one style of rabbit ears. The ears themselves are not expensive; they are just metal sheets, the mold that shapes the sheets is expensive if the volume is low. (the patch panel version will require two or three more mold pieces). 

    0
    Comment actions Permalink
  • Avatar
    M

    @Firewalla
    There are a lot of people asking for SFP+ because half the ISPs provide an SFP+ port and half provide an RJ45 port, additionally, half the users networks seem to be an RJ45 switch and half use SFP+ to connect between their switches. Either way you go seems to split the potential userbase, so here would be an idea:

    What if instead of designing the board with the specific MACs needed for your connection you have the two 10gb ports on a small PCB board that connects with something like a pcie x4 slot to the main board? It sounded like from a previous post that the MACs are using pcie lanes so this should work out easily. Then you can subtract a little from the cost of the main unit (say, $25) by not needing those components on the main PCB board and you can sell the option boards for $50-75 or something where one model is 2x SFP+ ports and one is 2x RJ45 ports and all the other required hardware to make those ports function.

    That satisfies both main camps of connections people want, and lets you sell the base unit for a little bit cheaper, and can give people the option of just buying the base unit now and "upgrading" down the line at some point to the 10gb connections. This would also let you see sales numbers for each option, to inform future product decisions as to whether ditching RJ45 for high bandwidth ports should be done in the future.

     

     

    And on another topic, I hope the final board does not have soldered RAM but instead uses a single sodimm slot (or maybe even a CAMM2 instead just for fun and more memory bandwidth? don't know if you can use them yet since the standard is so new though). I would really like to be able to upgrade the RAM as I end up wanting to use more containers.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Daughter boards are pretty expensive to build and test. At the moment, we can't even make our budget, so it is not possible to consider it.

    RAM is likely not soldered on.  

    1
    Comment actions Permalink
  • Avatar
    Chris Thomas

    My Firewalla Gold has a LAG to a pair of 1 GB Switches; for me, I'd want a minimum of three 10Gb ports so that I can dual connect the Firewalla to the Switch stack. 

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Update:

    • We should be able to build pre-order units at a decent (or good) price (bulk discounts). Future pricing is unknown, but it shouldn't be more than $1100 to $1200. (unless there are any unknown geo-political events or parts shortage)
    • (aggressively) We will know for sure in early March on the full schedule. And pre-order pricing info in the middle of March
    • (aggressively) Pre-orders start in early April
    • Delivery date for the first batch, before Christmas 2024

     

     

    5
    Comment actions Permalink
  • Avatar
    Christopher Ferrante

    Awesome news!

    1
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    Are you talking about a new product or talking about integrating WiFi into Firewalla? Hopefully the former and not the latter. I would hope others agree that combining a WiFi AP with Firewalla would be adding something I don’t need. I already have my separate mesh systems in place. If Firewalla had a built in AP, I would just turn it off. Hopefully one would be able to turn it off.

    More cost for something I don’t want/need.

    Or did I completely misunderstand your comment about WiFi?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    I deleted my side comment on something that's not relevant to Gold 10Gbit

    0
    Comment actions Permalink
  • Avatar
    Shon

    adding WiFi would be great

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Update:

    • Our management is optimistic about launching pre-sale on 4/2/2024 
    • The next step: waiting patiently for the board/s to come back. (it took more than 1 year to get to this step ...)

     

     

     

    2
    Comment actions Permalink
  • Avatar
    Robert Kobbeman

    Any idea what the presale price vs full retail price will be? If it will be eight or nine months before the units ship, I would hope the presale price is a good discount. That is a long time to hold our money.

    I learned about Firewalla only a few months ago, so I’m not privy to past presales.

    Thanks.

    0
    Comment actions Permalink

Please sign in to leave a comment.