@impovich said in IQA89601G1P5 QAT not working:

qat_ocf0: <QAT engine>
qat_ocf0: no QAT IRQ instances available
device_attach: qat_ocf0 attach returned 6

That is expected if there is simply no device present. or none with a driver attached.
And that appears to be the case here:

none0@pci0:0:16:0: class=0x0b4000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x37c9 subvendor=0x8086 subdevice=0x0000 vendor = 'Intel Corporation' device = 'C62x Chipset QuickAssist Technology Virtual Function' class = processor

It looks like the FreeBSD driver simply doesn't support the virtual devices yet:
https://redmine.pfsense.org/issues/14173

Though looking at the code it does appear to be listed.
https://github.com/freebsd/freebsd-src/blob/main/sys/dev/qat/include/common/adf_accel_devices.h#L12
That is in the 23.01 code so you might expect it to at least try to attach.

@stephenw10

I understand, but the cpu can easily handle throughput.

No updates AFAIK. There was a recent thread about OpenWRT on the T70 over on their forum that confirmed the e1000 patch to allow switch access is not present there either. Velocloud had patched it them selves and not upstreamed it. Though there's a good chance such a patch would not be accepted upstream anyway.

Steve

OpenVPN would get a bump from IIMB in Plus 23.05 (if you can use DCO), as would IPsec and WireGuard. But on a CPU that old it's difficult to speculate about how much faster it might be.

Most DAC cables are expected to work in the 8200. It's specifically RJ-45 SFP modules that are not supported; though some do work it's unpredictable.
Generally though if you can use fiber do so. 😉

Steve

@riahc8 16GB officially but reports of 32GB running on the N5105 along with info on bios updates can be found here:

ServeTheHome - JasperLake

I'm still waiting on the 2 port N100 they promised by end of May.

Yes, looks like it should be supported in 198.00_1.

@stephenw10 Hey, an assumption turned out right! My journey into full pfSense nirvana continues. 😇

@tman222 said in SFP28 and SFP+ Optics Compatibility:

Thanks @keyser and @Dobby_ for the explanations, I really appreciate it. If the goal is to achieve a 10Gbit link between SFP28 on one side and SFP+ on the other, do you think I would have better luck trying an SFP+ transceiver in the SFP28 cage, or going with a dual rate 10/25Gbit SFP28 receiver instead, assuming that the underlying controller on the SFP28 side supports 10Gbit operation? Thanks again.

It should be even steven as the only “limiting” factor in that setup is if the SFP28 Cageowner OS supports the tranceiver you intend to use (either the 10/25 SFP28 or the 10G SFP+).
The cage specifications supports both operational scenarios from a hardware perspective.

@stephenw10 This made all the difference from completely unusable beside crashing and rebooting to being usable. And so far from all testing reliable.
Not as fast as Intel NICs but for 100-200mbps.. (OpenVPN throughput) perfect.
I will be getting an intel i3 NUC with Intel nic this weekend to test.
Nat speed: 400-500mbps.
I've been stressing it for 10 hours moving huge file trasfers in both directions
and doing http speedtests.
both over openVPN and 1Gbps NAT.
Along with "regular" Internet usage.

-Steve

@spossis83

Qnap QSW-1105-5T
5 Port 2,5 Gbps Auto Negotiation (2,5 G/1 G/100 M)
Unmanaged Switch for around ~89 € (Amazon.de)

NETGEAR MS305
5 Port Switch Multi-Gigabit Ethernet (5X 1G/2,5G)
Unmanaged Switch for around ~150 € (Amazon.de)

NETGEAR MS105
5 Port Multi-Gigabit 2,5G Ethernet
Unmanaged Switch for around ~165 € (Galaxus.de)

All three are unmanaged, with 5x 2.5 GBit/s ports and
from under 100 € to under 200 € available.

@daredevilbear said in X552/X557-AT and 5GBASE-T:

@stephenw10

Currently on 2.6 but will try 2.7.

If you get success you may be perhaps report it here,
would be nice to hear something about from you.
It is not a seldom question

Hmm, OK. Since you have a screenshot does that mean it did boot correctly after that? Or did you roll back the driver to get that?

Breaking new ground! 😉

Oh? In what respect? I've not tried that, the description looks almost identical to how pfSense works with the exception of multiple routing tables.
Also dpinger only monitors the gateways, or other IPs, it doesn't do any of the policy routing or traffic failover/balancing.

Steve

Yes that still the same. What's different is if you have a switch with a bunch of VLANs and a single 1G trunk connection back to the router/firewall. If, for example, you have some devices pulling huge files between two VLANs that could saturate the trunk causing problems for hosts on other VLANs that might be trying to access external resources. With separate interfaces in that situation you are only limited by the routing capability of the firewall itself, usually well over 1Gbps.

Steve

@airone-0 said in SFP modules not visible:

@dobby_ said in SFP modules not visible:

If you are using their routers, together with their equipment, all is fine...

In Italy, for the normal user, having a Tim Italia router with 1Gb of speed may seem the best. However, it is enough to have a little experience and require a little more stringent use of the internet to see the limits of the router.

I was only thinking "where is the difference?"

ISP outer in front of the pfSense Media converter in front of the pfSense.

Ports that remain closed and cannot be opened, units connected by cable that remain invisible to the router and therefore unmanageable, connection parameters invisible and blocked by the ISP, etc.: being able to remove the ISP router becomes a liberation.

For sure I know what you want to say with this!
I am using a AVM FB7490 and in the future it will
be a FB 7590 AX. I opened one LAN port to the
WAN port of the pfSense as an "Exposed host".

There are several APPs for iOS and Android you can use
for that router and it will be there only connected the;

SmartTV (snitch) small NAS (for VPN road warrior connect)

@Dobby_ , are you sure there isn't some VLAN port to set on the Netgate as regards Deutsche Telekom? I don't know the connection parameters of DT, but when I tested the Media Converter I lost a lot because at first it didn't connect, until I realized I didn't set the VLan port correctly. After that the connection took place in an instant.

In Germany the Deutsche Telekom is using for their Glasfaser (Fiber) network VLAN ID 7 at the WAN port.
But many other ISPs do it also.
Deutsche Telekom: VLAN 7
Vodafone: VLAN 132
Helinet FTTH: VLAN 414
EWE Tel: VLAN 2011

@gwaitsi said in Yanling J1900 4Port N10 - Shoutout for customer care:

FYI - on a separate note, same with qotom, the first thing to do with these boxes is remove the thermal pad between the heatsink and cpu and replace it with a good quality thermal paste. Dropped 10deg on my devices by doing that.

This should be done at many of the Chinese mini PCs,
10 degree cooler is really good! Also having hands on
the latest BIOS should be nice to have.

How does it appear at boot? Do you see USB com ports created? What com port are you setting to see that error?

@prochid said in Required Hardware Build:

ISP is going to give me 2 STM1 connections.

So ~300Mbps total?

Almost any hardware running pfSense would handle that. You might have a very large number of states with that number of users even if they don;t get much bandwidth so you would want a reasonable amount of ram.

Steve