pfsense with proxmox

[sahostking]

Hi guys,

Instead of using Hardware firewalls we are considering pfSense as a VM in proxmox. We have 2 network cards per host node and currently use 1 for public and 1 for backup network traffic and have around 7 nodes we want to use it on.

Should we setup pfsense firewall on each node or just 1 is enough to manage traffic on all.

Haven't done testing yet just a thought we discussed in a meeting.

Experiences appreciated or any comments with respect to this.

 

[wolfgang]

Hi,

I would never use only one PFSence, because you have to engage gre tunnel or extra VLAN and one nic in the cluster always have the double traffic.

Also think about cluster network, what will be a problem if you make a backup and the public network is under load.
Vlan is no solution for this kind of problems.
I would recommend you a third nic.