Okay, to close out this thread (yes Fahrenheit…).  The box was RMAed and promptly swapped out for a new one.  All is well so far. Great hardware support!

Thanks,
Mike

Hi,

now i understand, had the same trouble with reboot. This is why i said to try powerd from console  first :-)
So once again if you want to try :

In the webinterface open
Diagnostic->Edit File
In Diagnostics: Edit file press Browse, go with mouse(button)  to  boot then loader.conf.local now a white window is open, just copy and past there
hint.acpi_throttle.0.disabled=1
Now press button save and reboot.

After reboot try dpowerd -v from shell if it works you can set this option via web

Just try a new PSU with something like 12-20V DC and 1A current.
Use a big capacitor 1000µF/32V and a small one (1nF or so) in parallel on the supply lines to bolster current and cut noise.

Depending on your setup it could prove beneficial to use UTP cables. This cuts hum-loops which can do all sorts of nasty things.

We now ordered the SC523L-520B which is a 2U chassi with front I/O which supports full ATX format: http://www.supermicro.nl/products/chassis/2U/523/SC523L-520.cfm

It turns out the interface was just not assigned to a port…I'm a newbie to pfsense.

PC Engines wrote back and said I could try booting voyage linux and run the burnK6 program from the cpuburn package to stress test the cpu (since their thought is that it's memory or cpu and the memory test completed a 2nd round of tests that ran without error for ~9.5 hours).

Also, doktornotor suggested generating DH 4096 as described here:https://doc.pfsense.org/index.php/Importing_OpenVPN_DH_Parameters

I've run into this situation years ago and I'm always surprised that there doesn't seem to be any software to test/verify specific components.

You could try out Soekris LAN cards with dual or quad port or their VPN cards also based on the PCI bus.

Thanks. I checked out a guys build on the unraid forum and he has successfully run Kingston. I am gonna go with the ecc Kingston. Thx for the suggestions. Case ordered and will order the mb and memory next week.

Ok

With the new pfsense will I need to do the trim on ssd?

If the SSD is supporting TRIM, I woudl activate it in pfSense!

And also will I have to adjust clusters on the Intel nics? Don't know if all this has been resolved in 2.2.4

If you come on trouble you must tune the mbuf size perhaps but this should be test by you before
you tune them up.

Is there any chance that openvpn will become multithreaded or unlikely? Once again thanks for all the help

This would be more tends to the WAN interface that is only using one CPU Core, as I see it right
it is not pointed to the pfSense team that OpenVPN is using the more cpu cores.

Did you note this line from the 2011 post

I needed to add the line "set bundle enable ipv6cp" somewhere in the mpd5 config in order to allow it to accept ipv6cp config from my ISP.

Might want to try enable/disable there.

@ytn:

@thermo:

@ytn:

http://www.asrock.com/mb/AMD/QC5000-ITXPH/

That's exactly the board I recently bought, now I would be interested to know if you can get the serial port working on this thing if you have the opportunity to try it out. Only difference is that I am runnning Linux with pfsense virtualized.

I am guessing you're not using VGA? I haven't tried using the serial port as a console before… I'll give it a try when I get the new system setup.

I got my new machine up and running and really like the board. It's dead quiet, and total power draw (at the wall socket) is a hair under 20 watts. I am using a pico PSU which I had lying around. I have a 120mm fan drawing air in and an 80mm fan taking air out. Both are set to "quiet mode". Can't hear anything from the machine and haven't run into any problems so far.

Will load up a couple more packages next and see how it goes.

I didn't get a chance to mess around with the serial console yet… will let you know when I do.

EDIT:  FYI, the C2758 can't route 10Gbe of traffic yet.  It may be able to do close to that in a later version of pfSense once DPDK is done.

I consider to this statement or until the Intel QuickAssist will fully be integrated in pfSense.

Why not run 10.000base-T and get rid of the fiber unless you need the distance?

10 GBit/s are 10 GBit/s, eother over copper or fiber cable. And a new Netgear XS708e is starting at
around ~1.000 € its a bit high price only for changing the medium, or?

http://www.supermicro.nl/products/system/1U/5018/SYS-5018D-FN4T.cfm
If you buy from pfsense store, then its called the XG-1540.

This is starting at $1.250 in the USA or 1.500 € in Europe.

The C2758 wont route 10gbit/s in a mixed packet scenario.

I would also consider here but on the other hand nothing is more real then a real done test!
And an Intel 10 SFP+ Adapter is cheap to get over ebay for ~90 € bucks or so.

If the hardware must be bought it should be the XG-1540 as I see it also right
or a Intel Xeon E3-1286v3 and 16 GB ECC RAM, this would be also a really powerful
pfSense appliance that is able to handle this speed.

I'll be more inclined to look for less expensive wifi upgrades down the road since I don't really care about routing performance.

Likes me, too.  ;)

GIGABYTE GA-F2A68HM-H

If you own it now its ok, but if you want to buy it, please take a mini ITX board
fitting an Intel CPU likes Core i3 with AES-NI on it!

AMD A8-7600

Intel Core i3 or i5 would be better in my eyes

G.SKILL NS 4GB

ok

Intel E1G44HTBLK wan link aggregation (lacp)

ok, but the other end of the LAG must also support the LACP then!

WD5003AZEX hardware raid 1

Beware of RAID levels if you not really know why and when you need it.
Better to go with a larger or huge SSD or mSATA or SATA-DOM at this days.

Just a follow up, I now run pfsense in a VM with the aforementioned hardware. I'm only giving it 2 gig of ram and 2 cores, generally speaking it doesn't use more than 60% of the memory, and (assuming memory compression in the VM), it's only using 254 meg overall in the ESXI dashboard.

Yes, exactly.
What scenario are you trying to prevent here?

Steve

Thanks, all. Those were pretty much the answers I was expecting. Time to browse some ubiquiti hardware.

Very old thread, but i have it now finally connected :) (msi version with celeron 847)

It does my 500/500 line at 35% cpu when dowloading from usenet.
Have pfblocker and nat running. Trying to get snort working.

No idea if it still works when i add snort and other services, bought when the line was 100/100 but it seems to do fine.
Snort active and CPU on 76% with line rate download..

If it must be external but you want to hug up the Sierra Wireless card anyway you could try out
one of those adapter here shown under the link. miniPCIe to USB adapter

@riahc3:

Just in case I get asked, Im looking for a cheap PC compatible with pfSense that has a full PCI-E slot as I already have a network card for pfSense.

Could be something for you together with a cheap 1U rackmount case