That's all based on essentially just 2 lines there. ffs_clusteralloc at the beginning of the bt, and curthread being c-icap. Plus the entirety of the bt being the same functions on all 3.

Thank you! Both excellent suggestions!

@BlueKobold: You could be trying out to enable the following; PowerD (hi adaptive) Is really urgent to get the power from the CPU that is just in the moment needed increasing the mbuf size step by step You might be having to less RAM inside to do so tuning for Broadcom NICs Could be a hit, but not a must be. Installing better NICs likes Intel server grade net work adapters Would be the best option here as I see it right. Tuning and Troubleshooting Network Cards "System->Advanced“ "Use PowerD" enable hi adaptive I have already tried using Intel (Server) NIC and did not see any difference. For this reason, I'll leave tuning the Broadcoms until later. PowerD was not selected, but was already set at "hiadaptive". I presume checking this activates the daemon and requires a reboot? Edit: Random other information that makes me think this is not pfSense or (my) network related:  Other media (amazon/Netflix) play fine, only Hulu is having the issue.

Hi, i had also equel problem but only with a slow, sometime broken connection to pfsense  WebGui from lan. Suricata show me ACK missmatch and other crazy thinks. My problem was a flapping WAN port . Setting to 1GbitFD fixed on card and switch solved also my problem. Maybe a bad cable but now it runs… regards max

That's what "sticky" is supposed to do. But all of that is handled by pf, which comes from FreeBSD/OpenBSD – That sort of feature would need to be added there first and then make its way into pfSense.

Thanks stsowen683, good useful info! I'll look into that.

I am currently on 2.2.4, will plan an upgrade window to get to 2.2.5 and see if it persists.

but can you people please explain what are the features in pfsense that we can call this a Firewall, Firewalls are filtering traffic by using rules or rule sets, in pfSense this job is done by the packet filter pf. as i think pfsense have only squid in it? And ClamAV as a AV, Snort or Suricata as a IDS/IPS, but this are only features, options and functions that came by default or over a packet system inside of pfSense. There are also on top many different variants of firewalls available on the market and they all will be differ each from another by using different techniques and functions. One of them would be the "NG-Firewall" that is working also application based. Please elaborate. A router is routing packets from one to another or more networks, a firewall is inspecting packets to separate packets from one to another or more networks and because that a firewall is also capable to route packets make them not automatically being in the same area or on the same stage of devices.

Backtraces all seem to be memory operations. Could be running out of RAM, could have flaky RAM, etc.

Definitely!

Because it is a handled in relayd as a proxy and not as a NAT relay as the other modes do. You'll also notice that all queries appear to originate from the firewall when using it for DNS.

~$1k is a pretty nice budget.. You could buy a actual pfsense box from pfsense and prebuilt nas with that.. Why does it need to be 1 piece of hardware?  As you stated your going to have a RACK.. What is the point of a rack if your only going to have 1 thing on it? How much storage do you need/want? But sure that would buy a pretty decent VM host, and then use whatever hypervisor you want, esxi, hyper-v, xen..  If you are really thinking of getting away from off the shelf user grade stuff then really should do some research on visualization..

@mohiyodeen: I just want to know how to setup Pfsense as Firewall in my network?  please explain. https://doc.pfsense.org/index.php/Installing_pfSense https://zacheryolinske.wordpress.com/2015/04/29/how-to-install-and-configure-pfsense-2-2-2-firewallrouter-for-your-homeoffice-network/ https://www.youtube.com/watch?v=Kq0GiGt4Xf8 Best I can do, given I don't know what your network is like. Even on a basic level, any of these how-to's ought to be enough for you to get started. If you get stuck, post a question concerning the specific problem. Otherwise, links to how-to's are all you're going to get at this stage, I'm afraid.

Hello, Thank you for the reply. I had believe the iptables syntax was the correction solution the above mentioned problem but it seems not. This is an article describing the solution (it's further down): https://community.ubnt.com/t5/EdgeMAX/Removing-Netflix-geoblocking-on-Roku-3-firmware-6-1/td-p/1277865 I had replicated that configuration on my Edgerouter and I'm having no luck at all doing it on pfSense. Problem: Roku contacts Google's DNS (over Unblock-US or Unotelly's) It by-passes them and decides to use Google's DNS Now it won't allow me to view any of the US content, because Google DNS is hard coded into the Netflix application and the only way to make this work is by rejecting/redirecting all the Google DNS requests to Unblock-US or Unotelly I'd think.

Interesting… Well, I can assure you that the limit for regenerated certificates is not < 19.

It was effectively a problem with a config.xml. But in fact it wasn't an issue with the current config.xml but with an old one present in the directory /cf/config/backup. So I moved /cf/conf/backup to /cf/conf/backup.orig and then mkdir /cf/conf/backup and everything came back to the normal. It was really frustrating because even if you just wanna save the current setting, pfsense seems to read the back and if one is corrupt crash…. I hope it could help someone in the future ;) Renaud