Using a used mini PC as an OPNsense or pfSense router
Updated 2026-09-25
A router needs at least two network ports: WAN and LAN. These PCs have one. The quality of the second port matters more than the CPU: every Intel Core CPU in this list is fast enough to route a typical home gigabit connection.
Ways to get a second port, best first
- PCIe card (Lenovo Tiny riser models): a dual- or quad-port Intel NIC gives the most reliable result and room for VLANs.
- Vendor module (HP Flex IO): a second Ethernet port in the chassis. Match the module version to the generation.
- USB adapter: works, especially with VLANs on a managed switch ("router on a stick"), but is the least robust option for a firewall.
Models with an internal second-port option
| Model | CPU generations | PCIe | Faster networking |
|---|---|---|---|
| Dell OptiPlex 7080 Micro | 10th gen (Comet Lake) | PCIe (dGPU option) | 1 GbE (USB for more) |
| HP EliteDesk 800 G3 Mini (verify) | 6th gen (Skylake) / 7th gen (Kaby Lake) | None | 1 GbE (USB for more) |
| HP EliteDesk 800 G4 Mini | 8th gen (Coffee Lake) | None | 1 GbE (USB for more) |
| HP EliteDesk 800 G5 Mini (verify) | 9th gen (Coffee Lake Refresh) | None | 1 GbE (USB for more) |
| HP EliteDesk 800 G6 Mini (verify) | 10th gen (Comet Lake) | None | 1 GbE (USB for more) |
| HP EliteDesk 800 G8 Mini | 11th gen (Rocket Lake) | None | 1 GbE (USB for more) |
| HP Elite Mini 800 G9 | 12th gen (Alder Lake) / 13th gen (Raptor Lake) | None | 2.5GbE via Flex IO port with an Intel I226-V 2.5GbE controller (must be configured at purchase) |
| Lenovo ThinkCentre M720q Tiny | 8th gen (Coffee Lake) / 9th gen (Coffee Lake Refresh) | PCIe x8 via riser | 10GbE via Low-profile PCIe network card in the riser slot (riser and bracket bought separately) (owner-reported, not a vendor option) |
| Lenovo ThinkCentre M920q Tiny | 8th gen (Coffee Lake) / 9th gen (Coffee Lake Refresh) | PCIe x8 via riser | 10GbE via Low-profile PCIe network card in the riser slot (riser and bracket bought separately) (owner-reported, not a vendor option) |
| Lenovo ThinkCentre M920x Tiny | 8th gen (Coffee Lake) / 9th gen (Coffee Lake Refresh) | PCIe (dGPU option) | 10GbE via Low-profile PCIe network card in the riser slot (riser and bracket bought separately) (owner-reported, not a vendor option) |
| Lenovo ThinkCentre M90q Gen 1 Tiny | 10th gen (Comet Lake) | PCIe x8 via riser | 10GbE via Low-profile PCIe network card in the riser slot (riser and bracket bought separately) (owner-reported, not a vendor option) |
Tips
- Intel NICs have the best driver support in FreeBSD, which OPNsense and pfSense are based on.
- AES-NI, used for VPN throughput, is present on all the Intel Core CPUs in this list.
- Running the router as a Proxmox VM saves a box but means the internet goes down when you reboot the host.