BlueKobold often blindly recommends APU and Jetway products when they are clearly not appropriate. I'm starting to think he is getting kickbacks lol.

No PPPoE, just regular IP and NAT. Ok, then the Jetway NF9HG-2930 would be also interesting for you, fan less and silent without turning parts! Jetway NF9HG-2930 ~$199 2 x 4 GB RAM ~$50 M350 case ~$50 external PSU ~$15 mSATA 16 GB ~$20 Is that with an APU2?? No, it was a SG-4860 from the pfSense store! Would also be a nice unit, with QAT, AES-NI and it comes pre-tuned! So do you think the SG-2440 is not enough? No it don´t think so, only with much luck and without PPPoE it could be running well, but I would not trust on that! better then the SG-4860 would be nice!

Not much to work with if you're not seeing any logged warnings from the sk driver. There's not much by way of tuning options for it either. You could try diabling msi/msix globally using the following loader variables added to /boot/loader.conf.local: hw.pci.enable_msix=0 hw.pci.enable_msi=0 One or both of those may help. Steve

Thanks for info folks, I really appreciate your input.  I will take your advice into consideration. Not sure which way to go just yet, but you all have given me some valuable information needed to make an educated decision. Cheers!

Could you not restore the backup to a separate instance, then just print the old thread out to PDF?

Thanks again folks! Got my switch, VLANs and AP up and running. A little for work to be done on rules…I went with a dlink managed 5 port switch.

@BlueKobold: @kujako: Thanks all. Found a Soekris net5501 in the back of my closet I think I'm going to use to try out pfsense to make sure it's for me before investing in any more hardware. If this device will be going in a real usage and you also try to use it for VPN setups, you can speed up the IPsec from ~14 MBit/s to ~42 MBit/s of throughput by attaching a small Soekris VPN1411 miniPCI card. (Only if needed or you are interested on that!) Soekris vpn1411 Nifty, thanks for the link.

Yes, use SSD. Any recent SSD should have a write count far exceeding what you can do to it with pfSense in any sane configuration. If you are concerned, re-using an older SSD perhaps, you can still opt to move /var and /tmp to ramdrives significantly reducing writes. Steve

Padlock is only supported on Via CPUs, unless you are running that you will see it look for and not find that hardware at boot. https://en.wikipedia.org/wiki/VIA_Technologies#VIA_PadLock Steve

@psulions5: I tried the memstick image, the iso, and OS version 2.3.3, and 2.4 alpha.  I remember getting this thing to boot into the actual install once, but since then, it just won't.  Pretty annoying really :( Im using the VGA console with a keyboard etc. I hope its not to late, but in another thread a user with a Supermicro board was installing pfSense and it runs fine for him, but only after doing some thing before, such as; BIOS Update to 1.0b If there is one available please do it also for your board Installing pfSense 2.4-BETA please Please use the 64Bit memstick usb image and from there then a fresh and full installation on a mSATA or SSD. After installing and assigning the NICs and then please reboot! Only after the reboot all NICs are shown up and showing also the right speed!(1GB/10GbE) Here is the full forum threat about that. I bought a Supermicro 5018D-FN8T: The Chronicles

@Aethrios: Now, the PVID settings I have on the switch give me some pause: I can only set one PVID per port, even if the port is used in more than one VLAN. Clearly, port 3 (pfSense) is a member of both the WAN and LAN VLANS, so I'm under the impression that it needs to be configured with a PVID of both 2 and 3, in order to properly pass frames between the different ports. Also, I've tried setting the untagged modem port ( 8 ) to a PVID of 2, since it's on VLAN_2. I believe this is correct? The PVID setting simply controls what the port does with untagged traffic that passes into the port (traffic coming into the switch from a connected device).  If you want untagged traffic on a port in say, VLAN 50 (my VLAN number is arbitrary) you set the PVID to 50 and set the port untagged in VLAN 50. That would handle a client device that is unaware of VLANs.  The PVID makes sure any traffic entering the port that doesn't already have a VLAN tag gets tagged as 50, and the untagged setting in VLAN 50 makes sure that any VLAN 50 traffic passing through the switch will exit the port, removing the tag in the process.  You can only have one PVID per port. Hope that makes sense.

Hi I'm running an APU2C4 on a 300mbps link. I'm running Snort, Squid, Squidguard and lightsquid. There's often 3 of us watching Netflix or Amazon or streaming some other media - including 4k, or a mix of that and online gaming. The only time it struggled was with AV turned on, otherwise it's normally running fine without stressing the CPU or memory. It's such a tiny box, it's easy to keep out of the way, does get warm though :)

•2 LAN connections •1 WAN connection •1 Wifi connection •300$ budget (maximum) ISP line is 100Mbp/s No additional packages required For that point all several, smaller and greater appliances will be matching well! If you really don´t need any packets and the internet line will be longer only 100 MBit/s it could also really be that the SG-1000 will be enough for you! It is able to get here in Germany for only ~189 Euro, but over >150 MBit/s it should be then the SG-2200 for sure. But adding then WiFi internally would be not the best thing regarding to the heat inside of the case. As an replacement for the ALIX Board you could also be getting happy with the APU2C4 but together with a mSATA and WiFi Kit (card & antennas) you will be surely breaking the $300 with ease, not to much but a bit more you should be counting for that.

Thanks to all for their replies and help!

Thank your for your replies and confirmation. I will look at SG-2220 again and see if there are any deals available in UK.