If a network problem occurs exactly every hour,
then you have most likely a problem with the renew of your IP-adress lease.
Try a fixed IP-adress on the WAN side if possible.
Also powersettings of the SSD can cause this problem.

Grtz
DeLorean

Are the Cat6 cables selfmade or with molded plugs already attached ?

Grtz
DeLorean

This card is not supported by FreeBSD on which pfSense is built. Drivers can be manually added, you need to get them from the manufacturer.

More info on comparable cards on this topic: https://forum.pfsense.org/index.php?topic=86433.0

Chime in as well on this.  Any current SSD is not going to have any sort of issues.. They have 100's of  TBs of writes in their life.. No possible way your going to come close to this in some home system proxy in any amount of time where that drive would have been replaced normally from just being old and slow..

And 2nd to be honest the use of proxy in a home setup for "caching" purposes in modern internet pretty pointless.  Are you wanting to filter your you son's or something from p0rn?  if so there is prob easier solutions based upon dns vs actual proxy that would be easier to implement and manage, etc.

You should see waaay more than 20Mbps with an X3440. An old school Atom could push ~50Mbps OpenVPN with low encryption settings.

OpenVPN will always be slower than IPSec because of the kernel mode / user mode switches required.

Steve

Yup. That^

Given that you are connected to the wifi you probably just need to enable DHCP on the wifi interface and add a firewall rule to allow traffic. Assuming other settings are still at their defaults.

Steve

Read this topic. it's able to handle 500/500 on a single gigabit interface (it has only 1 LAN port) as a "router on a stick" using VLANs. Using actively several of these deployed in corporate environment - pretty reliable too.

So what's a realistic value? I've found threads like this that seem to indicate it can scale quite high. Yes, that may have a flawed test methodology, but elsewhere are mentions of 150-200Mbps without much issue. I know from reading here there are more than a few APU2C4 users around, some who must have tried this at some point.

Ok, Thank you!

–jason

Yes, that could work, and a serial-to-ethernet adapter as suggested would also work.

If your worried about a 1.5 watt difference.. As jahonix mentioned already - are you on battery?  You would be talking pennies over a year difference in elec cost otherwise..

Check for /boot/modules/green_saver.ko - if its there:

Add green_saver_load="YES" to /boot/loader.conf.local (make it if its not there)

Reboot

Then issue "vidcontrol -t 60" at the shell for a 1 min timeout and if it works you can add that as a shellcmd.

(this is how I got the screen to blank out on my DN2800MT board - it may work for you)

@Cogito:

@Jailer:

@Cogito:

@johnkeates:

If you want to run suricata then you'll need an i3 or better, and you won't find that sub-$200 indeed.

So i suppose a GA-J1900N-D3V isn't gonna cut it right (it comes with a Celeron J1900 2.0 GHz quad-core)? Because right now i can buy one of those for 1/3 of its amazon price.

J1900 doesn't support AESNI which will be required for 2.5. You'd be buying into dead end technology with that purchase.

So basically only recent ARM cpu or Intel Core or Xeon supports that instruction set while Celerons and Atoms are out of question?

More like everything older than 2008. But that's 10-year old stuff.

find a dell or HP business PC, i use a dell optiplex SFF with a i7 2600, 16GB of ddr3 and a mushkin 128GB SSD, added a low profile intel Gb nic for the WAN side and use the onboard intel Gb nic for the LAN. uses very little power and have only about $250 total invested

@snake007uk:

well as they say, "you learn something new everyday".

Let me check out the Netgates. Is there any news on PFsense 3.0? I really like the UI and DPI stuff Unifi give you, there doesn't seem to be anything like that on PFSense.

There is Snort or Suricata, that's some real DPI stuff.

It's fine, just don't configure the switch to modify your ethernet frames.

@Wingspinner:

Sorry, no way can either of those two low-end routers do anything close to routing at near wire speed with firewalling enabled. Based on published specs they can’t do it even with full cut-through as far as I can tell.

I just did  ~910Mbit/s  TCP-Iperf on an EdgerouterX w. NAT hw acceleration enabled.
It had a "default" setup - iptables firewall enabled , meaning just deny anything "non related" from the outside.

It would do around 210Mb/s wo. hw acceleration.

/Bingo

@Wingspinner:

BTW, the Netgear R7800 makes a quite impressive AP can still get well over 800mbs via 802.11AC  wifi on download 20 feet from the R7800 and through one wall.

Perhaps, but for the same amount of money you can get two Ubiquiti UniFi AP-AC LITE which do that same thing.. but you'll have two :p