ORANGE PI ONE as pfSense proxy?

Question

System administration

Good day! Will Orange-pi work as a firewall for a home network?
Its characteristics are as follows:
Processor Processor
manufacturer - AllWinner
Processor model - Cortex-A7
Number of processor cores - 4
Processor frequency - 1200 MHz
RAM
Size of RAM 512 MB

Will the Internet sag because of it. I also want to install openVPN and dhcp on it, and use other built-in features.

Well, another related question, how quickly will pfSense kill an SD flash drive?

Answer 1

Related questions:
1) what kind of traffic does your network have and how much? Multicast (eg iptv)? Broadcast (can generate various smart home devices)? All this can significantly load your already, not very powerful piece of iron)
2) What is meant by a firewall? Cut traffic on iptables? How many rules are planned to be used? Use something more serious like ips/ids?
3) which channel is out?
4) how many simultaneous vpn connections? Will it only be used to connect to the home network or connect multiple sites?
Until we know, we won't understand. If I were you, I would buy a Mikrotik Hap AC2 and not bother. In it, almost everything that you described is out of the box. What is missing - you can always add a script. Yes, on Linux you can do all of this, but it will take a lot more time. It’s better to dig into a well-documented piece of hardware and get a kick out of setting up dynamic routing than to sit and smoke the linux service log in the hope of understanding “why it doesn’t work the way you want it to” and, as a result, understand that you put an extra space in the config.
And the last thing: Mikrotik has a switch chip that, when properly configured, removes the load from the central processor during switching. And in your case, all traffic will thresh the processor.

Answer 2

You didn't specify the most important thing. The number of network interfaces and how they are connected to the system.
Usually, router hardware contains optimizations at the hardware level for packet forwarding, and crypto acceleration.
About a flash make Readonly file system. And then enough for a long time

Answer 3

In general, for a router, the hardware is very decent and the home grid should pull without question.
Therefore, the only question is how many rules you hang on the heavy firewall and turn on other chips.