Watch out for vPro blocking DHCP on the 2nd i226 NIC.

See: https://forum.netgate.com/topic/188858/issues-installing-pfsense-ce-on-a-minisforum-ms-01-baremetal-with-new-beta7-installer

@matyi-szabolcs Hey, I also have the N100. You can monitor CPU freq via pfSense command line using this command:

while ( 1 ) clear sysctl dev.cpu | grep freq: sleep 1 end

Paste that as-is directly into the pfSense shell (using the terminal not UI).

It'll refresh every second and show you all core frequencies like:

dev.cpu.0.freq: 1800 dev.cpu.1.freq: 1600 ...

Then you can do something CPU heavy like restart Suricata or something.

@salexandrov I have a working FreeBSD VM I was using to build some programs.
I used pfSense CE 2.7.2 source (as CE 2.8.0 are not available), to build the kernel module for ice_ddp.

Here is is : ice_ddp.ko.zip

It should work for pfSense CE 2.7.2 but not 2.8.0.
You probably need to disable ice (non DDP) module.

And I tried the same with latest devel-main branch : ice_ddp.ko.zip but I'm not sure if it will be compatible with CE 2.8.0 as RELENG_2_8_0 sources are not published

@stephenw10 i have strange fetish for this kind of devices,i'd like to get my hands on them,but still,i'll have to use some bigger pc-like or passive and keep those for tinker purposes...
i didn't even installed windows 10/11 there yet..just for fun

addon card eats about 2.5W idle unconnected.i'm now down to ~23.8W

Are you able to test 25.03-beta or 2.8?

@Seeking-Sense

Yes, this was all done in a FreeBSD 15 VM using VirtualBox. I had to change the default network card to VirtIO I believe since the performance with the other NICs was like dial-up modem speeds. I also had to install pkg manually using pkg-static since the auto installer when running pkg didn't work and just hung. I don't remember if I tried installing pkg before or after I fixed the slow network issue.

I just installed all the packages mentioned throughout the page since I wasn't trying to optimize size since I intended to throw away the VM when I was done.

Finding a working commit for the kernel was one of the main challenges. I looked for a commit right before a merge from main that was still 1500029.

OK, Thanks Stephen

Trim: yes, SWAP: no IMO.

It would for that Cron job but you could run it more often or on a different day etc.

You shouldn't need to load a driver for those, it's in kernel:

[25.03-BETA][admin@4200.stevew.lan]/root: kldstat -v | grep mlx 586 mlx4en 585 mlx4 587 pci/lkpi_mlx5_core_pci_table 584 pci/lkpi_mlx4_pci_table 233 pci/mlx 232 mlx/mlxd

BTW that ALTQ setting only applies to hn(4) NICs, so only in Hyper-V or Azure.

Just go to Interfaces > Assign and set LAN to a different NIC. But I'd want to have some other way to access the firewall first so you can revert the change if you need to. The direct console for example.

@hangmansnoose001380 Can you DM me the BIOS-File please?

@stephenw10 yea I only got 10G NICs. I tested on the host itself for today to get the setup right. Tomorrow I am going to test with my 2 Servers which are capable of doing 10G via SFP+

@patient0 Once it hits what it shows in the picture there's zero response from they keyboard. That's just my terminal monitor and keyboard that I connect to my hypervisor and pfSense box if I need direct access.

@Sergei_Shablovsky said in Screen fonts & mode in local terminal issue:

Already have in /etc/loader.conf

:charset=UTF-8:
:lang=en_US.UTF-8:
:setenv=LC_COLLATE=C:
:umask=022:

But unsuccessfully, - the result You able to see above….

Those are not loader.conf configuration directives, those look like /etc/login.conf configuration. (And read the note at the top of that file, especially the part where you have to run cap_mkdb /etc/login.conf after any edits)

It does seem like you have some sort of issue/mismatch with UTF-8 handling somewhere, but it's hard to say exactly where. I have no issues with UTF-8 in my terminals over serial or SSH but I have no idea what that KVM setup might be doing.

Hi! At the moment, the average traffic is around 4 Gbps

That's a fun thread. 😁

Normally not but if you're relying on NAT reflection that would be via the firewall in both directions. Both devices on the LAN would see the traffic as via the LAN interface.