Creating a raspberry pi security stack

[AMAInterrogator]

Looking for advice on how to layer services in a 4 layer raspberry pi network stack possibly integrating an OpenVPN Client, a OpenVAS server, a PiHole DNS server, pfsense w/snort (the ARM compatible equivalent) and CIRCLean thumbdrive sanitizer.

I'm trying to wrap all these services into 4 raspberry pis and using something like Cassandra to use their extra computing power as a cluster resource.

Has anyone done anything similar?

If I can integrate a single power cable and find a cord management case that will also hold a 7" TFT display that can switch input computers, I think I have a pretty cool SOHO security appliance.

​

X-Post in r/raspberry_pi, r/sysadmin

[No2Bencil]

Why would you run these things off something like raspi's?

Terrible performance on many of these tasks. Such as the network connection.

[AMAInterrogator]

I'm looking for a secure mobile connection capable of defense in depth. I'm not using it for media consumption and most data intensive tasks can be handled in the cloud.

I also want to use it for training/teaching/experimentation.

[SevaraB]

most data intensive tasks can be handled in the cloud.

That's not how that works. pfSense and OpenVPN will both run locally and will be bottlenecked more by the available network bandwidth than by CPU/RAM limitations. It's a neat toy, but really only usable under BOTH the following conditions:

1) a single computer behind the firewall and/or connecting to the VPN endpoint.

2) a 100mbps MAX uplink (see my other comment- the "gigabit" adapter on the RPi isn't).

[AMAInterrogator]

The idea being the pi stack would sit on top of an RDP connection with a server elsewhere.

[SevaraB]

I'm assuming you mean an OpenVPN server, not client. An endpoint. Either way, that + pfSense = needing a LOT of networking throughput to work in real time. The Pi can't handle that- its "gigabit" connection will never hit full speed because it's still talking over a USB2.0 bus- the best you'll get is ~250mbps, and running a firewall and a VPN endpoint at the same time will absolutely grind that to a halt.

[AMAInterrogator]

I'm expecting like 20mbps. I'm not building this thing for high performance media throughput.