I have the installer from the HP website and I've copied it to the firewall, but it's an RPM. pfSense doesn't seem to have RPM installed.

As explained before it isn´t there and will be never there, it is used by the packet manager from Linux
and not BSD.

Has anyone used the utility, or can you tell me how to install RPM?

No one can do it ever, since pfSense is based on FreeBSD and FreeBSD own it first.

You willing is likes to install a .msi file on a Atari or MaxOS.

It appears 60mm is the maximum length. Can anyone recommend a low-cost, compatible drive?

As I am right informed, there are three different length, M.2 2242 (42 mm), M.2 2260 (60 mm) and M.2 2280
(80 mm) so it can be that you will be able to insert also a M.2 "2242" in 42 mm length, perhaps. It is more
pending on how many holes are there to mount and fix the M.2 drive.

The bottom side might be enlightening us all, but for getting real informations about it perhaps someone from
the ADI or pfSense team could short jump in and answer this question adequate.

With PCIe 3.0 x4 (2242, 2280) there will be coming up many fine options for a fast caching proxy inside
of pfSense, looking towards to the M.2 (2280) Samsung950 Pro (2500 MBit/s write / 1500 MBit/s read).

I would start with a hardware audit if you don't already have it. CPU, RAM, disk, free disk space, interface cards (or motherboard if your using the embedded ethernet ports.

Check if each of the host systems is supported by the release (I know that interface card support has changed) and if the hardware still matches the current an foreseeable usage profile.  Maybe a site has grown since the original installation or maybe a site has specific throughout needs.

Once you have a list of the kit at each site, it may be that some of it gets totally replaced, and in doing so could become  spare / backup for the other sites while your upgrading, or alternatively get one new system. Set it up and install at one site. then take the hardware from that site, upgrade it at in your office / workshop and then swap the next site and repeat.  This method means if theres a problem at the site then you still have the old hardware to swap back in.

HTH
Andy

Around 30-32%

Thats what i was thinking … that i could be fine for a Gigabit, but, then if its maxed out (Cpu) i don't like that.

Should be at least some room :P

ugen0.5: <pixart>at usbus0 (disconnected)
ugen0.5: <pixart>at usbus0
ugen0.5: <pixart>at usbus0 (disconnected)
ugen0.5: <pixart>at usbus0

Hey, not sure if you've been able to fix your issue yet but I've noticed this behavior after I installed a KVM switch and I found that it was the issue. If you are using a KVM, that might be your problem. To me it doesn't affect anything GUI-wise but if you're using the shell it becomes a pain rather quickly. Hope this helps.</pixart></pixart></pixart></pixart>

Thanks for the explanation Matt  :)

Currently on my Christmas break, but I will test it out and report back in the New Year.

Tom.

I am having the exact problem using the msk module from creama. I use the msk as my LAN connections and am able to ping the LAN address of the firebox but not the other way around. I am also not able to do any DNS lookups.

The sk module works fine and am currently using it.

pfSense 2.2.5 full install
Firebox x5500e
bios 8.1

I´m open to upgrading the PFsense hardware to something more powerful if that would significantly increase performace.

Intel Xeon D-1518, D-1528 or D-1548 with 4/8, 6/12, 8/16, 12/24 or 16/32 Cores/Threads. Intel Xeon E3-12xxv3 (4C/4T) starting @3,0GHz upstairs Intel Xeon E5-2600v3 (4C/8T - 6C/12T) starting @3,0GHz upstairs

….and 4GB of ram.

8 GB - 16 GB ECC so fast as you could get your hands on (DDR3-1600,1860 or DDR4-2133)
and it will be supported by the Board and CPU! Mostly the CPU is powerful enough, but their
memory system got rendered!

high up the mbuf size to 1 million, because each CPU core is opening for each LAN Port one queue! if Squid is in use, please high also up the default memory RAM size (256 MB) and usage of Squid.

The problem is that the customer really wants it from within The Netherlands.

Call the www.Supermicro.nl office and ask for a reseller in the NL!

Yeah I just bought 2 of http://www.ebay.com/itm/X7280A-2-SUN-DUAL-PORT-GIGABIT-PCI-e-Server-Adapter-371-0905-04-D28207-006-/252209431410?hash=item3ab8da8372:g:GzoAAOxymnFSC5qAthese:

Thing is, that I don't really anything older laying around collecting dust, I'd eventually want to downsize the case and use a much smaller on and also allot smaller PSU since what I will be using from the start is not really needed.

I will also have a couple of servers on the network which I am not sure how to handidly setup DDNS/dynamic dns, but all in all pfsense seems to really be an interesting alternative.

It should. The driver's there as it's always been. It doesn't get you much acceleration unless your CPU's really slow (like a Geode or Pentium II or III). In a system with a fast CPU, it'll be slower than just letting the CPU handle the crypto.

Are you able  to insert two real NICs or a real dual port NIC to see if this behavior exist also there?

Do you have a real need to be dust resistant? And even so, most fanless still has airflow due to convection etc, only a handful of cases are truly sealed which limits TDP a lot. I have seen true rugged fanless systems meant for this, but typically $1k+ and come with miserable weak cpus.

Give up the fanless, take it from someone who has gone that route. The euler is a nice case (I have one) but it only works with thin-itx boards exactly and the fastest cpus it can handle are 45W TDP and only with a good ambient air environment. Finding 2 good NIC chipsets on those boards is a royal pain too. It can handle a ~2.5ghz quad but that is really pushing it, haven't looking hard at the clocks on mine (E3 1265Lv2) but I bet it turbos less than it otherwise would. OpenVPN currently still only cares about raw single threaded high clock grunt, extra cores won't help.

If what you actually want is quiet/near-silent, powerful and on a budget, I'm going to parrot my usual TS140/T20 mini-server deal hunting mantra. Hopefully you aren't also obsessed with making your router as small as absolutely possible too, its like a disease…

@BlueKobold:

@reilos
thanks for enlighten me.

No problem. Good luck with your build!
Have a nice weekend!

If it doesn´t work with the Mellanox cards, would the Intel X520 DA1 be a better option ?

I would say yes, but the best option for 10 GbE at the time is to get your hands on a Chelsio adapters
like this ones from the pfSense store, they are best driver supported at these days.

Intel PRO/1000 Pt Dual Port Server Adapter ~$45
Seller: Bets Part Inc.

Intel EXPI9402PTBLK PRO/1000 PT Dual Port Server Adapter - Network adapter - PCI Express x4 ~$25
Seller: AMTECH

Intel PRO/1000 PT Dual Port Server Adapter - network adapter - 2 ports (EXPI9402PTBLK) ~$75
Seller: Digicom Technology LLC.

Intel EXPI9404PTLBLK-1PK PRO/1000PT 4PORT - OEM SINGLE 10/100/1000 GBE PCIE LP QUAD NIC ~$56
Seller: AMTECH

The last one would be my choice to go for pfSense, with 4 Ports and to this adequate price no problem!

Cheap knock offs you will be able to get from everywhere, also fakes can be sold everywhere, but the RMA
policy from Amazon.com is better then the one from eBay as I see it right!

WRT54GL is a Linksys rooter which can run linux. If works with Tomato, OpenWrt, and DD-WRT firmware:
http://www.linksys.com/us/p/P-WRT54GL/

I've on the Wifi forum that power management is mostly never working, even if the option is available, so I'll stick with my Linksys AP.

Does anybody have a working setup with the I219V?

Its pretty to new I think.

I scaled back to 8gb, which I know is still overkill, but it was super cheap.

pfSense is using 2 GB together with Snort 4 GB will be right Set up a higher amount of RAM for Squid then the default 256 MB likes perhaps 4 GB increasing the mbuf size to 1.000.000 each pending on the number LAN ports and
CPU Cores would need also something around 4 GB - 6 GB

So I count 16 GB is well for a very fast pfSense & Snort & Squid, why this should be overkill?
For sure if you only set it up and don´t tune it the whole RAM will never be used it is worse.

@power_matz:

Yes, I have this fix installed. Do you think that this might cause the behaviour?

I just checked to see if my box still had the mod as Its 30 miles away being used by friends.  It does so Id say that it seems to make no difference.  I am running a faster 533fsb 2.2 Intel(R) Pentium(R) M processor 2.26GHz on this guy with 2GB of ram. Clue?    Full install on HD but that shouldn't matter.

$ dmesg|grep LED mskc0: <marvell yukon="" 88e8053="" gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0x8000-0x80ff mem 0xd0020000-0xd0023fff irq 16 at device 0.0 on pci1 mskc1: <marvell yukon="" 88e8053="" gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0x9000-0x90ff mem 0xd0120000-0xd0123fff irq 17 at device 0.0 on pci2 mskc2: <marvell yukon="" 88e8053="" gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0xa000-0xa0ff mem 0xd0220000-0xd0223fff irq 18 at device 0.0 on pci3 mskc3: <marvell yukon="" 88e8053="" gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0xb000-0xb0ff mem 0xd0320000-0xd0323fff irq 19 at device 0.0 on pci4 skc0: <marvell gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0xc000-0xc0ff mem 0xd042c000-0xd042ffff irq 16 at device 0.0 on pci5 skc1: <marvell gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0xc400-0xc4ff mem 0xd0420000-0xd0423fff irq 17 at device 1.0 on pci5 skc2: <marvell gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0xc800-0xc8ff mem 0xd0424000-0xd0427fff irq 18 at device 2.0 on pci5 skc3: <marvell gigabit="" ethernet="" (led="" mod="" 2.2)="">port 0xcc00-0xccff mem 0xd0428000-0xd042bfff irq 19 at device 3.0 on pci5</marvell></marvell></marvell></marvell></marvell></marvell></marvell></marvell>