That HP box has Realtek NICs. Wouldn't go there.
As Steve hinted, OpenVPN is single-threaded, so you'll want something faster than either of those CPUs.
See if you can find something above 3GHz with say two cores. A used HP desktop maybe. Even then, 1Gb over OpenVPN may not be achievable.
Sounds like either a bad power supply or some sort of power problem on the board.
Try a differenr 12V PSU if you have one. Not much you can do about a board fault. If you have any expansion cards on it you can try removing them to see if one of those is at fault.
It's also a 4200?
If so it's the EZIO-G500 for which I don't believe there is an lddproc driver. Yet.
It's possible to just write data to it just to ensure it works. You can pipe the system log to it for example.
@stephenw10 Did quite a bit of research with settings, tweaking them over and over again. Also installed other firewall/router OS distributions to isolate whether the problem was with PFSense itself, or is a hardware limitation on these boxes.
Long story short - I can safely say the Qotom J1900 cannot pass gigabit down/up in a practical, real world situation. The bottleneck isn't the CPU, but the PCIe lanes.
Having said that, I've no real practical application of a Gigabit up/down connection today - so putting this on the backburner and living with whatever >500mbps I'm getting, until I decide to upgrade this box.
That is certainly odd, I've not seen that here on anything. However it looks like just cosmetic issue.
You could open a bug report for it. We'd need to replicate it though and it doesn't look like you're doing anything unique which might make that difficult.
@greg_e said in USB NIC on 2.4.4.p1 release?:
If I absolutely need to do something else, I'll put one of my old Cisco routers between the two networks and then use vlans to run through the firewall.
I'm not parsing that. It seems like you could just route between the VLANs in pfSense using a router on a stick setup.
But anyway getting hardware with real NICs is better.
Hmm, interesting. I don't see anything indicating an ARP issue logged there.
I would take a packet capture on the WAN when it is down and see what is being sent and if anything at all is coming back.
One thing that may happen is if you set promiscuous mode in the pcap it comes back up. We have seen that happen before but I think only on ppp connections.
I assume you're running 2.4.4p2?
Since the issue is carried between OSes it seems likely a hardware issue. On which case I would check for power saving options that maybe enabled. There is a PCIe power saving setting that some BIOSes enable that can behave like this.
@stephenw10 Thank you for replying. As with moth things, 10 reboots and plugging and unplugging it decided to work lol. So its running and I successfully have internet everywhere in the house both wired and wireless behind the cable modem into Pfsense into the wireless router and into a small switch...I'm exhausted. Now I need to figure out the easy part and how to use it. Thank you again.
@jimp thanks for taking the time to reply to my post. The pfsesne pc worked well with an HP NC360T nic card, but when I install the i350 the pc just beeps and hangs. You are correct in that it is a hardware issue. I will try resetting the bios and flashing the nic card. I will post my findings. Thanks
Also, at least in my experience using the driver built in to FreeBSD, the watchdog timeout is pretty easy to provoke by running iperf tests against the LAN interface. I see that the Odroid H2 has dual RTL8111Gs whereas I, and I believe most others using the official Realtek driver, have been running Zotac machines that I believe have RTL8111Es. Both of those use the same driver, but I think it's fair to say that the RTL8111G is less "battle tested" with this driver. Have you also confirmed that the driver is indeed being loaded and used by looking for it in the output of ldstat?
I going to say probably not since I've never seen anyone else report that.
What hardware is it internally? If it's not x86 then definitely no. If it is and it's not locked down, to a signed boot image for example, then maybe.
Have a look at the Fractal Design cases: https://www.fractal-design.com together with Noctua FANs they are pretty awesome.
If you want to extend your build to a big VM host the Define R6 is really nice with plenty of space for disks, and you can use the 5.25" bay for a temp/fan monitor of your choice.
I would be very surprised if it is not but you need to know the PCI-ID of the card to know for sure:
That is true, it will only boot 2.4+ due to the UEFI requirement.
There are some pretty detailed write-ups out there for compiling Coreboot.
There is also (or at least was) a third party BIOS that enabled legacy booting on the original Minnowboard max and Turbot.
Probably the powerd settings. Adaptive rather than the default 'high-adaptive' will run the CPU slower on average in variable load conditions resulting in marginally less power consumption and hence heat.
No fan at all with the same heatsink would concern me. It's a smaller heatsink than the MBT-2220 which is entirely passive but a greater potential power dissipation.
Multiple queues should exist for ix or ixl interfaces by default. You can configure a fixed number using those options if you wish otherwise the system will add as many as the driver supports or your have cores for.
You should see the queues in top -aSH at the command line.
Seems like you're hitting the legacy console issue which is known in 2.4.4+ though it would not normally reboot by itself.
Either boot the device in UEFI node which should give a working console or do this:
Specifically the section regarding Atom systems with Intel HD graphics.
In your case your device appears to have a serial console so you could also install using that which does not have this problem.
@tman222 said in Hardware opinion with Gigabit fiber.:
Even though you already purchased the hardware I just wanted to chime in here quick as well and mention that I have been using that exact same system with a symmetric gigabit fiber connection for almost two years and have been very happy with the performance. I basically have all the things installed that you mentioned in your post, although I don't use IPSEC anymore these days. This is a very capable little box and that will even scale beyond gigabit (I have done some basic 10Gbit testing with it).
They back-ordered it so I am still on the hunt for one at a good price but thanks for the confirmation!!