You have to compile the kernel with that option in the kernel config file.

@edwardwong:

@Limbi:

@edwardwong:

Try not to use -evp option, it looks like everything with this option will trigger the hardware engine. And your CPU is quad core, you can actually put a "-multi 4" as the option to run 4 encryption together.
But that's quite interesting, because I owned a higher end processor, the Avoton C2550, and the number with 4 threads together is half of your single thread. Not sure if this is the problem with the OpenSSL on my Linux server (yes, this is not a pfSense machine). I suppose my Avoton should be running a lot faster compared with your N3700.

Where I should put "-multi 4" to run 4 encryption together?
Thank you

Ciao

Read the posts above, answer is already there.

I read that, but I'm a newbie and I don't know witch file to edit.

zbox ci323 is a better local solution

take a look at the unifi AP.. their new AC line is very reasonable priced with lots of features.. the lite goes for $89 while the pro is $149..

https://www.ubnt.com/unifi/unifi-ac/

Another advantage of the external AP is allows you to properly place for best coverage vs where your pfsense box is located..

It would be in the 45w-70w range depending on your power supply. I had for a while a machine with an e8400, a cheap Acer m-atx motherboard with igp and a couple of ddr2 slot both filled with an 1GB single rank ddr2-800, an intel pro/1000 pt dual and finally an v300 ssd. It pulled 54w while idling. I did some math, in my country energy cost roughly 0.2€/Kwh so each watt cost 2€ per year after some calculation. I did a quite complex excel file to take into consideration every variables, so I'm pretty sure. You can expect almost 110€ per year on electrical bill or 9€ per month if you prefer. Of course, your mileage may vary a lot depending how the electrical bill is calculated then the cost of the energy per Kwh, I bet it would cost less but not enough to don't take into consideration to buy brand new low power parts as I just did. Replacing the cpu+mobo+ram combo and then the psu with an old 500w+ 80plus I already had it dropped the power consumption at just 20w. At worst. I can go further with a pico psu or a brand new psu, but right now I'm quite satisfied, I save more than 70€ per year whit much more power available.

Ciao.

Netgate RCC-DDF is the correct system id string.  Sometimes the marketing name and the engineering name for a product don't match up, (sometimes the name changes too late in a software release cycle).  It maybe not ideal, but its functionally correct.

@messerchmidt:

my above post + 1pci network card

if your on the cheap, difficult to do.

then I would rather go for stability and choose the cheaper Intel D2500CCE, with 2 x onboard Intel LAN, and you can add 1 x PCI Intel LAN to make a 3-port setup.

Thanks, this explains a lot of things. I will check with ProxMox about why these info aren't exposed to the VMs.

BlueKobold's method worked for me. Try here for the HTML version: https://portal.pfsense.org/docs/book/

If you aren't logged into the pfsense support portal you'll get a login screen asking for the user/pass for your pfSense store account.

overkill, but sufficient

add a dual intel nic, and your done

@messerchmidt:

obsolete. would avoid

go j1900-d3v

The GA-J1900N-D3V has been discontinued in the UK, superseded by the GA-N3150N-D3V.

Thanks for reply, fohdeesha!!

I try to upgrade my Pfsense v2.2.5 to v2.3 but after upgrade I seen that new pfsense does not support bind package. So I have to stay my previous version till new version not support bind or provide a way to install bind package.

Thanks once again for reply and your time.

@edwardwong:

@Jailer:

@Perforado:

Can't understand the market for a A1SRi-2358F.

$50 cheaper than the C2558, lower power consumption and slow internet access that will likely never exceed the capabilities of this board.

You mean C2358 suitable for slow internet access? Nope.
Considering the Pentium 1037U, also a dual core processor with similar clock speed, is already able to handle 1000Mbps WAN-LAN NAT with about 50% CPU usage only, I wouldn't see how slow this C2358 will be.

I would say if one is not going to add complicated functionality concerning CPU power to this setup (e.g. intercepting proxy like HAVP), I don't see why can't we just save the $50 for other purposes.

Sorry, I should have clarified that I was talking about my slow internet access. The C2558 is overkill for my needs due to my slow internet access.

The SuperMicro A1SRI-2358F fits my needs perfectly now and in the future. About the only thing I wish it had that it doesn't is a msata slot for an SSD but that's not a deal breaker for me either.

Brilliant - thanks a lot  ;D

ok, thanks, I'll test setting the RW before update. If all goes well I can do the updates on the other boxes.

Apparently those intel cards can double as Digium X100P FXO cards in Asterisk.

Other than that they're winmodems. Blecch.

Yes I know about that. But at the time you post, there isn't Pentium 1508, not sure why this is not even included in Intel's announcement (also the naming is a bit confusing)

I've had problems with Intel NIC watchdog resets in Linux and got around it by disabling all kinds of offload features (but checksumming still enabled).