Can I use a MicroTik CCR2004-1G-2XS-PCIe as my home router in my TrueNAS system?

In seeking 10G+ solutions for my home, it occurred to me that I only really care about 10G routing for my TrueNAS Scale machine and my main PC.
I came across the MicroTik CCR2004-1G-2XS-PCIe and in theory it sounds like I could put this in my TrueNAS box, have WAN from ISP going into one SFP port, one SFP port going to my PC, and maybe the gigabit port to a WiFi router (set up in AP mode). Then I’d have full speed (10G ISP connection) for my PC and server, gigabit WiFi for everything else, and it would all just live in my TrueNAS machine.
Has anyone done anything like this? Does this even look possible or am I misunderstanding its capabilities?
Any feedback, advice, appreciated, welcomed.

Thanks!

1 Like

Seems interesting.

I think drivers could be problematic.
And I’m concerned about the “PCIe initialization delay” bios requirement they mention.

Me, I just use a pfsense vm and a 10gbit dual Nic card :wink:

This is a very clever solution in need of a carefully crafted problem…

Why not just get a CRS305?

1 Like

I think you’re probably right and that many of us home-server/self-hosted folks are well known to do that to ourselves.
You raise an excellent point though. My thought was “I’ve already got this great machine on a UPS with space for a PCIe card”, but a small wired 10G router would definitely do the trick with a bit less fuss, if slightly less integrated, and certainly cheaper than a wireless router with two 10G ports. I’m new to SFP so I’d have just have to figure out what cards to put in the server and PC to support that connection to the CRS305. Any recs?

Solarflare SFN 5122F/6122F/7122FF, Chelsio T520, Intel X520… whatever you find second-hand/refurbished. Should be $50 apiece or less—just check that Intel NICs are genuine.

And DAC for short runs.

1 Like

Looking more at the CRS305, I’m concerned an 800 MHz single core processor might not be enough to actually support routing at 10G vs just switching. I’ve had issues in the past with similarly spec’d wireless routers struggling to hit 1G. The CCR2004 has a much beefier processor, and I suspect in part because it’s meant to be a high throughput router.

Switch where you can, route where you must…is the oldest network motto there is and is still true today.

Buy a cheap 10 gig L3 switch and put a 10g generic nic in your Truenas server. Let the switch do the routing. Use vxlan or a virtual firewall if you need to isolate vlans from routing between each other.

That Card is no different than running and x86 or ARM Linux router with FRR package installed.
It will actually become the bottleneck as it’s not an ASIC it’s a 4 core ARM cpu that’s forwarding in the CPU. It’s no better than using your NAS cpu. Its value is as a mid priced 25g nic. Functionally it’s basically a 25g 4 core ARM DPU.

Opnsense or pfsense in a vm will be far more useful if you need isolation of host vlans. You just need decide if you run that on the truenas host or a dedicated box.

That decision really comes down to how many cores you have available on your system.

Personally I get 10+ gbps through my Nas with opnsense no problem and just isolate 4 cores to it with a good Intel 10g NIC that has decent buffers\memory space and stable Linux drivers.

My internet connection is direct into my switch, I take the vlan up to the opnsense vm and route from here to secured and unsecured vlans. The switch does a single L3 routing function on the trusted side, and some isolated vxlan forwarding for some host/vms that support it.

1 Like

Take a look at the RB5009 or RB4011.

Thanks for all of the thoughts! After evaluating my current and potential future networking desires, I’m going to give the EnGenius ESG620 a shot. Not a lot of reviews, but their other stuff seems to have decent reviews and the combination of SFP+ and 2.5G POE+ is going to give me a lot of flexibility for the price. The TP-Link ER8411 is probably next in line if the ESG620 doesn’t work out well.