Thanks all, it's done after reboot and lets blug sfp with fibrer on SFTP+ port.

But I need the full speed for the basic stuff like: snort, squid, pfBlockerNG, maybe HAVP, SquidGuard, Darkstat This means then to be a fully featured UTM device, and there fore you may need perhaps a little bit more horse power and RAM on top of this. The APU2C4 is not really powerful enough to handle that amount of things. I was curious if that little apu can handle so many plugins :) I can max out the RAM and I would go for an SSD for fast caching. Jetway NF9HG-2930 & 8 BG RAM & 120 GB mSATA would be nice to serve that network load, not ot much but powerful enough. All in all ~350 Euros I would think about.

I've been toying with going with my ISP's Gig package (1Gig down/50Mbps up), Are you using PPPoE together with that 1 GBit/s Internet account? If not, then you may fine with the SG-4860 unit from the pfSense store! Another user named gonzopancho was talking about nearly routing 1 GBit/s at the WAN interface and +/- 500 MBit/s together with IPsec VPN. So I would say ask at first your ISP for that! The SG-4860 is matching the Intel C2558, ass I am right informed.

Yeah, I'm just gonna pretend my account was hacked and that wasn't me.  ::) The XG-1540, XG-1541 and C2758 all have 4 ports by default, but are expandable. We did do rack ears for 7551 too at one point. And I concur 6 is 4+.  ;D Steve

@pfBasic: Yeah I use PIA VPN, those tests are synthetic and don't necessarily represent real world performance. You can run those commands in SSH. But the performance you are getting is definitely a configuration issue. I get 160Mbps real world usage on a J3355 and PIA VPN and the CPU isn't even working hard. Granted, a J3355 will be faster than a J3455 with OpenVPN but you should still hey WAY faster than .5 Mbps. Post up your settings and we'll try to get your VPN straightened out. Thank you I made a new post here on pfsense since I didnt want to hijack this thread. https://forum.pfsense.org/index.php?topic=129193.0 I ran the test in SSH: 256 cbc = 11.724s = 272.9Mbps 256 gcm = 11.329s = 282.5Mbps 128 cbc = 11.573s = 276.5Mbps 128 gcm = 11.094s = 288,4Mbps pfsense 2.4b Asrock J3455-ITX 2x4GB HyperX DDR3L 1866MHz 2x16GB SanDisk Ultra Fit

Mmm, hard to say how Squid could cause that. I guess the peak bandwidth could be higher on the LAN from cached data. Not sure what you could do though. Steve

@fatgump: The dashboard report max as 2501MHZ. I wouldn't expect the dashboard to dynamically report the current CPU frequency.  I expect that your CPU is working as intended and you're just not seeing the results indicated in the dashboard.

There may be multiple config indexes available in which case you might need to force it to load a different index to be recognised. For example: usbconfig -d 1.2 set_config 3 Generally configs indexes are 0-4 but there may not be any. It's worth trying though. If one of them does allow it to be recognised you can add a USB quirk to loader.conf.local to apply it every time. Steve

Any interface can be defined as a wan. Just create a gateway and assign it to the interface or ip4 / 6 configuration set to dhcp / pppoe depending on connection type.

Holding the power button for 5 seconds just turns the computer off.  After reboot no web interface.  Will probably be able to fix with I get the video card adapter tomorrow.

IMHO, any N3150 based boards are crypto-capable and low-power, 8Gb RAM limited by design - the only negative effect I've experienced.

That^ Probably they are both using the same internal subnet, 192.168.1.0/24, which is causing a conflict on the Airport as it tries to route/NAT between them. If you change the pfSense LAN subnet to something else that will probably allow it to function but switching the airport to run as an access point only is the better solution. Steve

@dlucas46: Hi, I have attached the 1mb bios to this post.  The main 750e thread was deleted by mistake. I believe it is based on 8.1 No other modifications were made to this bios, it is a straight copy of Stephens original unlocked bios. Thanks!  I'm going to give this a go tonight.  Sadly I haven't been able to get any sort of FreeDOS image running but VyOS, pfSense, m0n0wall all have no issues so I'll be using flashrom to get there.  Fun stuff!

I'm pretty sure it's just option (1) Boot to Multi User and it goes from there. https://www.youtube.com/watch?v=7nr9HNZ7OmY

@pfBasic: J3455 is a 1.5GHz CPU. It can burst to 2.3GHz but won't do this unless it needs to and some set of criteria are met, when it does burst it will be for a short time. There's another post on here with similar questions. It seems like there are some misconceptions about CPU clocks. Always look at the base frequency when choosing a CPU, this is the reliable guaranteed value all of the time unless you thermally limit it and it decreases to keep from destroying itself. Boost and Turbo speeds are not always on and won't be achieved in all environments. If you put your CPU in a hot closet for example, it may never burst or turbo, or if it does it may not hit the maximum burst/turbo frequency. @Runenaldo: It seems that turbo boost to 2.2ghz is achievable for longer periods of time, at least in win 10 running prime95. The last 100mhz to 2.3ghz is another story though. Also per another thread here on the  forum, the "1" in 1501Mhz should indicate that it's capable of or running more than 1.5ghz (2.2ghz in the case of the J3455) Thanks guys! I figured it was something like that.

@Pippin, interesting info.  Thanks for the reading.

thank you for your response pfBasic & stephenw10, I will try it later cause the firewall is currently active, but i will write down mac addresses of my current interfaces to check if there is renumbering of NICs when i try to add the new NIC. again thanks

UK VDSL is likely to be up to 2x 80Mbps so most current hardware will do that with ease even with Squid running. Any descent SSD should not fail for long time though 2 in a gmirror is not a bad idea. Better to save on SSDs and double up on total hardware if you can. Two issues I see: 1. Squid will always use the default system route so only one of the DSL connections. It's not possible to load balance between them from Squid if it's running on the same box. You can load balance other traffic though or policy route it via the non default WAN perhaps. 2. You can't really use an HA setup with PPP connections that are terminated on the firewall. To do it will correct failover you need to use a different device in front of the pair running the PPP. But that then represents a new single point of failure. Steve

Got it up and running. yay! :D Basically just followed page 1 of this post https://forum.pfsense.org/index.php?topic=119574.0

How I do agree.! I did check out the CPU with Intel to understand the TDP and then read…. Processor Base Frequency 2.00 GHz Burst Frequency 2.50 GHz What I didn't understand is how the burst mode values are arrived that. Sort of different to how my 6700k is listed. It was important to know if the CPU supported the AES instruction set and, if needed, virtualization.