Hi! I know this is kind of an old topic but... :-) First, Thank you SO SO SO MUCH for the FreeNas Tipp ;) Saved me hours recompiling the kernel (never done that on FreeBSD). Is anyone running LACP with these cards? I currently have pretty bad performance issues, ~1-2G throughput with a 2 link 802.1ad Cheers, Matthias

xlameee… Can you please answer my questions about the LC version for the Dell R320.

Probably better to ask if FreeBSD 11.2 does. More chance someone might have tested that and posted it somewhere Googleable. Steve

X553 is the NIC used in the C3000 SoC so yes. And they are 1Gb in the SG-5100: https://store.netgate.com/SG-5100.aspx Steve

Hi @dajones13 , Not sure what our budget or connection speed is, but in terms of of your requirements I can recommend this: https://www.supermicro.com/products/system/1u/5018/SYS-5018D-FN8T.cfm Have been using this system (added SSD and 16GB RAM) with a symmetric gigabit fiber connection for about 1.5 years now without issues. Very capable little box with room for growth. If you need more horsepower, check out this newer model: https://www.supermicro.com/products/system/1U/5019/SYS-5019D-FN8TP.cfm Hope this helps.

Ok, with only one config index it will need to be changed in Linux. That does assume CradlePoint haven't changed it in some way. Steve

@killpilot , thanks for the follow-up. After giving it a lot of thought, I also decided against virtualizing pfSense. I decided it would would be better to run something this critical on dedicated hardware. I ended up going with a different solution (Fortigate) as I wanted something pretty robust with good support. So far it's working well.

Of those, I'd probably go with the i3 if 2 gbe is sufficient. It'll have VPN performance roughly on par with the xeon, and faster than the c3558. If you want to spend $750, the https://www.wiredzone.com/supermicro-servers-compact-embedded-processor-sys-e100-9s-e-10028141 should outperform the d-2123it for this application.

OK, but once you've done that you can boot from USB, change the console settings etc. It will be far easier to boot other things with all the BIOS options available. Steve

It helps a lot! Finally a proper answer :) Thank you very much! Best, Nick

Hi Steve, it seems like this motherboard and pfSense ain’t friends at all, acpi issues all over the place... I tried to turn it off in loader.conf but then it just doesn’t boot. I’m going to replace this board with a different one and give it a go. Thanks C

Here are the results before and during the speedtest: Before: 11 root 155 ki31 0K 64K CPU0 0 154:42 98.58% [idle{idle: cpu0}] 11 root 155 ki31 0K 64K CPU3 3 154:30 98.41% [idle{idle: cpu3}] 11 root 155 ki31 0K 64K CPU1 1 154:18 97.95% [idle{idle: cpu1}] 11 root 155 ki31 0K 64K RUN 2 154:51 97.35% [idle{idle: cpu2}] 340 root 32 0 98776K 38364K accept 1 0:02 1.36% php-fpm: pool nginx (php-fpm){php-fpm} 19 root -16 - 0K 16K pftm 0 0:57 0.60% [pf purge] 71606 root 20 0 7812K 4000K CPU2 2 0:00 0.12% top -aSH During: 12 root -72 - 0K 544K WAIT 1 2:17 98.74% [intr{swi1: netisr 0}] 11 root 155 ki31 0K 64K CPU3 3 157:05 76.71% [idle{idle: cpu3}] 11 root 155 ki31 0K 64K RUN 2 157:33 69.36% [idle{idle: cpu2}] 11 root 155 ki31 0K 64K RUN 0 157:20 63.68% [idle{idle: cpu0}] 12 root -72 - 0K 544K WAIT 0 0:38 26.18% [intr{swi1: netisr 1}] 12 root -92 - 0K 544K WAIT 0 0:43 24.11% [intr{irq260: igb0:que 0}] 12 root -72 - 0K 544K WAIT 3 0:32 15.26% [intr{swi1: netisr 2}] 12 root -92 - 0K 544K WAIT 2 0:15 8.30% [intr{irq264: igb1:que 0}] 12 root -92 - 0K 544K WAIT 3 0:13 4.80% [intr{irq265: igb1:que 1}] 11 root 155 ki31 0K 64K CPU1 1 156:40 2.67% [idle{idle: cpu1}]

Yes, I think there was a post in the main xtm5 thread about that some time ago. Try PMing this guy: https://forum.netgate.com/post/731573. He's still active. Steve

If you can get Hardware+Software from the same producer it's always the best choice, they work 100% together and you'll get good support. With HP for example you will have problems with the Gen10 because there are no working FreeBSD drivers yet. I tried myself with some ProLiant DL360 Gen10 for testing ~3 months ago and could not even get through the pfSense 2.4.3-p1 Installer... If you want some 100% reliable out of the Box pfSense without tinker just get one Netgate appliance and be happy. :-) -Rico

You should not have to do anything. Any recent SSD of even vaguely reasonable quality will last many many years. However if you still want to reduce write cycles you can move /var and /tmp to RAM in System > Advanced > Miscellaneous. Also you can remove the swap slice when you install, though if the firewall is swapping it's probably configured wrong anyway. Steve

If your Realtek chipset is among those listed here, I have had very good luck with the official driver. The compiled binary for 2.4.4 is here: https://forum.netgate.com/topic/135850/official-realtek-driver-binary-1-95-for-2-4-4-release I run two pfSense boxes with Realtek NICs and have had no problems at all with them using that driver. However, I'm dealing with 100/10 cable connections. I wouldn't expect them to achieve full gigabit speeds and I wouldn't trust them for enterprise applications, but for home use with sub-gigabit Internet connections they should be perfectly adequate.

Thanks for this information :)

Ouch! Better than some software/firmware bug I guess though. Steve

I have no idea what consoles are on that device but from your description it sounds like there is an RJ-45 serial console port. Note that is not Ethernet. It might have a VGA console too. Possible via an internal header. You would still need an adapter of some type for that. Do you have anything with a serial port? You could conceivably make a console cable using an old Ethernet patch directly. Buying a USB to serial adapter and an RJ-45 console cable is the correct way to do this though. You might be able to remove the boot drive and re-install it in something else depending on what it is and what you have available. Steve