Thanks everyone for your input. It sounds like I should stick to the cradle points and similar in bridged mode. I was hoping to find something a little cheaper for my customers but sounds like it's more trouble than it's worth.

Thanks @stephenw10. As an update to this, I replaced the Intel Pro/1000 VT to an HP NC365T and all issues have been resolved. Thanks!

I did not try putting the MikroTik on another port, however I did try only having two of the Intel interfaces up as WAN and LAN, and I still want up having problems. For fun, I tried installing the ESXi on the machine to put pfsense inside that. ESXi wouldn’t recognize the Intel at all.

@inxsible Got it and point taken. Just to clarify my comment where bigger is better let's say you have a choice between a 12V/5 AH or a 12V /7 AH battery for use in a USP unit or alarm panel or emergency lighting station. For that I’m going to take the higher rated Amp Hour all day long. Same for car battery with a higher CCA rating or electrical panel for your home. Having the extra in reserve for those instances will do no harm. Of course sticking a 200amp electrical service in a 70 year old 800 sq. foot home is probably overkill so there’s that too. I think we could agree in some cases bigger is better but not in all cases as you pointed out. In any case glad to hear you confirmed my new found 80W PS is a better choice. What I’ve just noticed after switching from the case’s original 220watt PS to the Pico setup is the board is system is running a bit warmer. With the original PS that came with the ITX case the temp was always between 36 to 38.0°C and now with the Pico setup its hovering between 42 to 43.0°C which is still good according to pfsense’s default "Zone Warning" presets so not going to panic yet.. The only answer I have for that is fan from the original PS was keeping a nice flow of air going across the board to assist with the lower temp. Thanks again for the part list and feedback, all is good. My next objective is to see if I how much uptime I could rack-up without a reboot. We all need goals right..

Thats fixed it, thanks Jim. [image: 1539637854381-nvme2-resized.jpg] [image: 1539637863130-nvme1.jpg]

Yes this post is WAY old. But in case anyone else runs into this issue with a SG-1000 device, I reduced CPU utilization from near constant 1.0+% to .7 - .8% tops via webui changes: go to Status > Logs > Settings, deselect 'Log packets blocked by Block Bogon Networks rules' and 'Log packets blocked by Block Private Networks rules' System > Advanced > Firewall & NAT, change the dropdown list selection for 'Firewall Optimization Options' from 'Normal' to 'Aggressive'

@syserr_01 said in DIY-Solution or SG-1000 or SG-3100? Home-Office Tunnel for small networks: ... the T620 Plus is a reliable solution? Something that lets me sleep at night? @bfeitell said in DIY-Solution or SG-1000 or SG-3100? Home-Office Tunnel for small networks: The HP thin clients are pretty darn robust. Sorry, have to disagree here. We put a couple of those devices behind touchscreens to work as their brains and connect to the control system. Four out of 5 failed within the first year of use. So reliability score is nowhere as good as expected. This also means that I wouldn't sleep well knowing I rely on these devices. When it's important to you to have the service up and running when you're away then nothing beats new, reliable hardware custom made for this task. Granted, these can fail as well but it's not as likely.

@johnpoz it can push gigabit all day long under linux+iptables. last I looked it was a little slower with pf (800 something Mbps) but as I said above it may be better with the isr deferred config. it cannot do gigabit pppoe, and openvpn speeds are somewhere around 50-100Mbps.

OK, thanks for reply.

It may be worth trying with UDP mode too. I just did that and got a little above 700Mbps. I wouldn't be shocked if it's just not possible to do much better than that with these Realtek NICs.

I assume you want to setup a VPN from pfSense to the RV50? Have you tried this and it didn't work? How did it fail? There is almost certainly no way to run pfSense on the RV50. Steve

The driver itself has been upstreamed and is now in the FreeBSD package so is included. But the GUI components have not been updated to include it (yet) so it must still be started manually at this time. Steve

Thanks! I was looking at the Qotom systems as well. Decided to work with what I had on hand. ESXi gives you a browser based interface, and you can click on VM and they open in window. Edit VMs, meaning assign more RAM, Disk, or even a virtual CD-ROM that you mount as an ios. Really cool stuff. I attached some screen grabs. I thinking of building a HTPC, when I'm done with pfSense. Likely to put the Mini back into commission for that. BTW I've got an Iron Man theme going... Pepper Pots, Happy, and Heimdall :-) [image: 1538437535305-esxi-resized.png] [image: 1538437535701-osx-resized.png] [image: 1538437517074-ubuntu-resized.png]

The Hades Canyon has 2 intel Nic's 1 is a i219-lm the other i210-at. I can tell you at the time of writing this my system under full download speeds running suricata never goes above 10% CPU. This is a beast @occamsrazor said in USB 3.0 to Gigabit Ethernet: Does the Hades Canyon have Intel NICs or something else? Not planning to get one, but just curious.....

Thanks for sharing. What sort of performance did you see with this Conor?

I work on these generation servers from Dell regularly. They are approaching 10 years old and we have started seeing motherboard failures. As others have stated you are probably seeing some type of hardware failure.

Ok, then I have to wait until pfSense gets some updates and supports my card. In the mean time I installed Lede/OpenWRT, it works great and was easy to install using many tutorials written for this card. {ENG} How to install Lede on x86 {GER} Configuration for EM/MC Modules {GER} Bringing the module to MBIM mode Thank you for your support Steve! I will return to pfSense as soon as it gets support for my card, don't worry :) -Marcel

Hmm, yup I'm also seeing that now. I had rebooted into single user mode rather than trying to use the menu. Loader path: /boot/loader.efi Initializing modules: ZFS UFS Probing 4 block devices.....*. done ZFS found no pools UFS found 1 partition command args: -S115200 -D Consoles: EFI console C |Command line arguments: loader.efi -S115200 -D Image base: 0x757b4000 IEFI version: 2.50 EEFI Firmware: EDK II (rev 1.00) E FreeBSD/amd64 EFI loader, Revision 1.1 F(Tue Sep 4 22:35:58 EDT 2018 root@buildbot3) ( Load Path: HD(2,GPT,7973EC77-BC18-11E8-99F1-0008A20BC486,0x64028,0x379C000) Load Device: PciRoot(0x0)/Pci(0x13,0x0)/Sata(0x0,0x0,0x0)/HD(2,GPT,7973EC77-B BC18-11E8-99F1-0008A20BC486,0x64028,0x379C000) BootCurrent: 0003 BootOrder: 0007 000a 0003[*] 0000 0002 0004 0005 0001 Trying ESP: PciRoot(0x0)/Pci(0x13,0x0)/Sata(0x0,0x0,0x0)/HD(2,GPT,7973EC77-BC18- c - spinconsoleles:is invalid!conf79C000) / __ _ __ / _|___ ___ _ __ ___ ___ | '_ \| |_/ __|/ _ \ '_ \/ __|/ _ \ | |_) | _\__ \ __/ | | \__ \ __/ | .__/|_| |___/\___|_| |_|___/\___| |_| +============Welcome to pfSense===========+ __________________________ | | / ___\ | 1. Boot Multi User [Enter] | | /` | 2. Boot [S]ingle User | | / :-| | 3. [Esc]ape to loader prompt | | _________ ___/ /_ | | 4. Reboot | | /` ____ / /__ ___/ | | | | / / / / / / | | Options: | | / /___/ / / / | | 5. [K]ernel: kernel (1 of 2) | | / ______/ / / | | 6. Configure Boot [O]ptions... | |/ / / / | | | / /___/ | | | / | | | /_________________________/ +=========================================+ https://redmine.pfsense.org/issues/8978 It also looks like you lose VGA as the primary console doing that and I've not found a way to restore it, yet. Steve