Hardware

• 

  Official pfSense hardware board
  • ivor

  1
  0
  Votes
  1
  Posts
  11546
  Views

  No one has replied

• P

  [SOLVED][XG1537] CPU-load jumped up, but no culprit to be found
  • pfImprudence

  6
  0
  Votes
  6
  Posts
  16
  Views

  P

  Thanks again! In the meantime, the problem resolved itself, but it's important to know stuff like that can happen :)
• L

  3rd party appliance equivalent to SG-5100 or better
  • Larrikin

  13
  0
  Votes
  13
  Posts
  289
  Views

  G

  How about a used Dell Optiplex 9020 SFF ? https://www.ebay.com.au/itm/Dell-OptiPlex-9020-SFF-Core-i7-4770-3-4GHz-8GB-Ram-128GB-SSD-Win-10-P/253373075009?hash=item3afe364e41:g:1-UAAOSwlAZaT41m 4 core i7 (up fo 3.9 GHZ) with , 8GB RAM + 120GB SSD, plus a Win10 license for 350$AU Add a chinese knock-off i350-T4 network card for 60$AU. The i5 version is available for only 270$... I run the i7 version with ESXi and 16GB RAM. It handles a 50/20 NBN connection withoit breaking a sweat... I have tried OVPN and could achieve 45Mbit/sec during the day. At night times my provider or NBN starts dropping UDP packets and VPN throughput becomes unusable at 1.5 MBit/sec. Back to 45 again after 11pm.
• T

  Building a Multi-Wan Balancer
  • tycho7286

  2
  0
  Votes
  2
  Posts
  71
  Views

  

  For 300Mbps total throughput you can use older hardware and unless you plan to run all the hungry packages then 4GB is going to be fine. Yes you can use VLANs for the WAN connections. Shaping requires CPU cycles and can introduce latency but if you have something relatively recent it should cope fine at <300Mbps. Yes you can setup a lagg to the switch but it's unlikely to be a bottleneck anyway since it will be 1Gbps and the upstream is only 300Mbps. Unless you have a lot of traffic between internet clients on different VLANs for example. Steve
• M

  Checkpoint T-120U (4200) LCD Screen
  • mfwade

  6
  0
  Votes
  6
  Posts
  598
  Views

  

  Not in the last 3 days! Still needs an lcdproc driver. It's probably more complex that other displays since it can do full graphics not just characters. However it also appears to have a much simpler mode since you can just send text at it and it will display something. Steve
• L

  SG-1100 Don't Restore Config!!
  • LostInIgnorance

  2
  0
  Votes
  2
  Posts
  88
  Views

  L

  Fix is: This was due to vlans and switch config being erased. If you're restoring a configuration to this device, make sure to either backup the vlan's before restore from the factory image, or recreate them manually. Make sure on the restore you select the box about the switch config.
• R

  Watchguard Firebox M400
  • revsie

  160
  0
  Votes
  160
  Posts
  11844
  Views

  

  Mmm, hard to believe that would be any different at reboot rather than boot but.... I am running a full install from CF and hence not booting uefi: [2.4.4-RELEASE][admin@m400.stevew.lan]/root: sysctl machdep.bootmethod machdep.bootmethod: BIOS Steve
• B

  ALIX APUBoard - only "clicking" noises
  • bgs-gi

  2
  0
  Votes
  2
  Posts
  63
  Views

  

  Sounds like either a bad power supply or some sort of power problem on the board. Try a differenr 12V PSU if you have one. Not much you can do about a board fault. If you have any expansion cards on it you can try removing them to see if one of those is at fault. Steve
• B

  Poor performance on igb driver
  • bdaniel7

  42
  0
  Votes
  42
  Posts
  2197
  Views

  N

  @stephenw10 Did quite a bit of research with settings, tweaking them over and over again. Also installed other firewall/router OS distributions to isolate whether the problem was with PFSense itself, or is a hardware limitation on these boxes. Long story short - I can safely say the Qotom J1900 cannot pass gigabit down/up in a practical, real world situation. The bottleneck isn't the CPU, but the PCIe lanes. Having said that, I've no real practical application of a Gigabit up/down connection today - so putting this on the backburner and living with whatever >500mbps I'm getting, until I decide to upgrade this box.
• T

  Odd traffic graph
  • tsmialek

  4
  0
  Votes
  4
  Posts
  99
  Views

  

  That is certainly odd, I've not seen that here on anything. However it looks like just cosmetic issue. You could open a bug report for it. We'd need to replicate it though and it doesn't look like you're doing anything unique which might make that difficult. Steve
• G

  Dual XEON processors?
  • Greg_E

  2
  0
  Votes
  2
  Posts
  94
  Views

  

  It will almost certainly run. I'd watch out for some obscure disk controller that severs of that type often have. It may not play well with FreeBSD. Steve
• G

  USB NIC on 2.4.4.p1 release?
  • Greg_E

  14
  0
  Votes
  14
  Posts
  241
  Views

  

  @greg_e said in USB NIC on 2.4.4.p1 release?: If I absolutely need to do something else, I'll put one of my old Cisco routers between the two networks and then use vlans to run through the firewall. I'm not parsing that. It seems like you could just route between the VLANs in pfSense using a router on a stick setup. But anyway getting hardware with real NICs is better. Steve
• F

  nic optimizations help
  • fern1988

  7
  0
  Votes
  7
  Posts
  146
  Views

  F

  @stephenw10 Did as you said, and it worked like a charm! Thanks again.
• R

  WAN drops after two hours SuperMicro X8SIE
  • ranoko

  5
  0
  Votes
  5
  Posts
  103
  Views

  

  Hmm, interesting. I don't see anything indicating an ARP issue logged there. I would take a packet capture on the WAN when it is down and see what is being sent and if anything at all is coming back. One thing that may happen is if you set promiscuous mode in the pcap it comes back up. We have seen that happen before but I think only on ppp connections. I assume you're running 2.4.4p2? Since the issue is carried between OSes it seems likely a hardware issue. On which case I would check for power saving options that maybe enabled. There is a PCIe power saving setting that some BIOSes enable that can behave like this. Steve
• N

  Pfsense can see Nic ports but only one gets lights/connectivity
  • Nightowl805

  5
  0
  Votes
  5
  Posts
  120
  Views

  N

  @stephenw10 Thank you for replying. As with moth things, 10 reboots and plugging and unplugging it decided to work lol. So its running and I successfully have internet everywhere in the house both wired and wireless behind the cable modem into Pfsense into the wireless router and into a small switch...I'm exhausted. Now I need to figure out the easy part and how to use it. Thank you again.
• R

  PFSense box won't boot with i350-t4
  i350-t4 i350 firmware • • romulusrodent

  4
  0
  Votes
  4
  Posts
  109
  Views

  R

  @jimp thanks for taking the time to reply to my post. The pfsesne pc worked well with an HP NC360T nic card, but when I install the i350 the pc just beeps and hangs. You are correct in that it is a hardware issue. I will try resetting the bios and flashing the nic card. I will post my findings. Thanks
• S

  Need router for security gates
  • Stewart

  20
  0
  Votes
  20
  Posts
  565
  Views

  P

  One more link --- Not sure this is POE -- http://www.electronicnetwork.com/en/onrisc-baltos-ir5221.html
• P

  Chelsio t520-so-cr on A2SDi-4C-HLN4F
  • posto587

  4
  0
  Votes
  4
  Posts
  85
  Views

  

  Ah, nice find!
• T

  Official Realtek Driver Binary 1.95 For 2.4.4 Release
  • TheNarc

  31
  3
  Votes
  31
  Posts
  1850
  Views

  T

  Also, at least in my experience using the driver built in to FreeBSD, the watchdog timeout is pretty easy to provoke by running iperf tests against the LAN interface. I see that the Odroid H2 has dual RTL8111Gs whereas I, and I believe most others using the official Realtek driver, have been running Zotac machines that I believe have RTL8111Es. Both of those use the same driver, but I think it's fair to say that the RTL8111G is less "battle tested" with this driver. Have you also confirmed that the driver is indeed being loaded and used by looking for it in the output of ldstat?
• F

  Is it possible to install pfsense on juniper srx110h2-va ?
  • firefox

  2
  0
  Votes
  2
  Posts
  114
  Views

  

  I going to say probably not since I've never seen anyone else report that. What hardware is it internally? If it's not x86 then definitely no. If it is and it's not locked down, to a signed boot image for example, then maybe. Steve
• R

  Cooling and Case Suggestions
  • riftor_77

  6
  0
  Votes
  6
  Posts
  283
  Views

  G

  Have a look at the Fractal Design cases: https://www.fractal-design.com together with Noctua FANs they are pretty awesome. If you want to extend your build to a big VM host the Define R6 is really nice with plenty of space for disks, and you can use the 5.25" bay for a temp/fan monitor of your choice.
• M

  Intel i350 NIC troubles
  • mouseskowitz

  16
  0
  Votes
  16
  Posts
  545
  Views

  

  It seems unlikely but I guess it could be. Some small variation in the components. If it works reliably connected that way I would just move on TBH. Steve
• N

  re1: PHY write failed
  • nokyere

  2
  0
  Votes
  2
  Posts
  92
  Views

  

  What hardware is that on? Specifically what NIC? When do you see that? Is it actually causing a connection problem? Steve
• T

  Any Espressobin Updates?
  • TitanAE

  14
  1
  Votes
  14
  Posts
  1326
  Views

  

  Nice! Just ordered (with Voleatech since I'm located in Germany).
• O

  Intel X550-AT supported?
  • ozlecz

  2
  0
  Votes
  2
  Posts
  130
  Views

  

  I would be very surprised if it is not but you need to know the PCI-ID of the card to know for sure: https://github.com/pfsense/FreeBSD-src/blob/b964e7355f44df566d5906568c7598e7f9313da0/sys/dev/ixgbe/ixgbe_type.h#L84 Steve
• D

  Coreboot Firmware/BIOS MBT-4220
  • DoZZa

  5
  0
  Votes
  5
  Posts
  113
  Views

  

  That is true, it will only boot 2.4+ due to the UEFI requirement. There are some pretty detailed write-ups out there for compiling Coreboot. There is also (or at least was) a third party BIOS that enabled legacy booting on the original Minnowboard max and Turbot. Steve
• O

  too slow internet download with intel 3558
  • ozlecz

  3
  0
  Votes
  3
  Posts
  140
  Views

  O

  yes you are right...put a gigabit switch on lan and everything is okay...many thanks
• A

  MBT-4220 - is it possible to cool passively?
  mbt-4220 mbt-2220 passive cooling larger fan heat sink • • alfaro

  6
  0
  Votes
  6
  Posts
  283
  Views

  

  Probably the powerd settings. Adaptive rather than the default 'high-adaptive' will run the CPU slower on average in variable load conditions resulting in marginally less power consumption and hence heat. No fan at all with the same heatsink would concern me. It's a smaller heatsink than the MBT-2220 which is entirely passive but a greater potential power dissipation. Steve
• D

  Solved - 10GB link 1GB speeds
  • donnydavis

  39
  0
  Votes
  39
  Posts
  4753
  Views

  

  Multiple queues should exist for ix or ixl interfaces by default. You can configure a fixed number using those options if you wish otherwise the system will add as many as the driver supports or your have cores for. You should see the queues in top -aSH at the command line. Steve
• S

  VK-T40E VPN Limits
  • scratchydog

  7
  0
  Votes
  7
  Posts
  228
  Views

  

  It will pass >200Mbps with 1500B packets using AES-128-CBC. More than that if you can use AES-GCM. Far more if you can switch to IPSec. Steve
• B

  pfSense 2.4.3 on a Zotac CI327 Nano: How To
  • binHEX

  6
  1
  Votes
  6
  Posts
  716
  Views

  J

  Great, thank you!
• J

  Hardware 1 Gbits
  router config configuration hardware • • Jules13

  8
  0
  Votes
  8
  Posts
  423
  Views

  

  Hmm, well if you use Squid/Squidguard to do web filtering I would want to see 2 cores there really, at least. Steve
• D

  pfSense and Nexcom DNA120
  • dreamerman

  8
  0
  Votes
  8
  Posts
  210
  Views

  

  Seems like you're hitting the legacy console issue which is known in 2.4.4+ though it would not normally reboot by itself. Either boot the device in UEFI node which should give a working console or do this: https://www.netgate.com/docs/pfsense/install/upgrade-guide.html#upgrading-from-versions-older-than-pfsense-2-4-4 Specifically the section regarding Atom systems with Intel HD graphics. In your case your device appears to have a serial console so you could also install using that which does not have this problem. Steve
• D

  gigabit WAN and capable pfSense hardware
  • digity

  14
  0
  Votes
  14
  Posts
  718
  Views

  

  970 is a bit overly optimistic ;) I think hehehehe They need to do some works on their maths maybe ;)
• M

  Hardware requirement for +200 Users 400Mbps
  • mydi

  5
  0
  Votes
  5
  Posts
  272
  Views

  

  Even Gigabit will be no problem. -Rico
• J

  Building my own router?
  • joshv918

  5
  0
  Votes
  5
  Posts
  400
  Views

  

  so you need a half card? Or low profile? What is the exact make and model number of this dell box? and we can take a look to what you could put in it if anything.
• D

  Realtek NIC + PPPoe + Gig, Cpu usage seems odd?
  • Doboy

  7
  0
  Votes
  7
  Posts
  385
  Views

  D

  @stephenw10 Thanks for the Powerd clue, i guess the cpu was not "bursting" to 2.08Ghz without it on, not sure yet but it has gained me another 100Mbps , closing in on 900 now..
• N

  Gigabit PPPoE and Intel Drivers
  • nojp

  31
  0
  Votes
  31
  Posts
  5205
  Views

  D

  @doboy If you read back a few posts you'll see some of my experiences. I actually had to disable the meltdown fixes as well to get back to close to what I was getting before.
• P

  mobo-cpu suggestions for 1u , with pcie slot
  • p33ter

  1
  0
  Votes
  1
  Posts
  132
  Views

  No one has replied

• F

  Hyperthreading on or off- Hyper-V
  • FTLN46

  3
  0
  Votes
  3
  Posts
  173
  Views

  

  Yup, test it and see. But beyond that it's probably more of a Hyper-V question. Steve