They are not required but they certainly help stop the 1100 sliding around and do obviously improve cooling. The ones I have are stood on one side to save desk space which changes that obviously. You can use some adhesive feet in place of them.

With the rule as it was set I'm surprised the xbox could connect out at all. Try clearing the states.

Does it do the same thing on a cold boot? Like after power cycling entirely? I have a modem here which does something similar but only on warm boot. Can you not just plug it into the port which works?

@stephenw10 I replaced the missing photos on Jun 28 22:43

@sic0048 said in Seeking Recommendations for Budget-Friendly, Heat-Resistant, Quiet Mini PCs with High Network Capacity to run pfsense: I think you will get better results if you pick a couple of choices and ask if they would be appropriate. It's unlikely that people are going to research all the possible options for you. Agree near free, 10Gb, hostile environment, reliable, minimal sound, 5+ ports, off the shelf (others vouch for performance). @sic0048 needs to choose what is actually important enough to drive purchase decisions then do some research.

For 2.7.2? You can extract the module from the 2.7.2 ISO image. The firmware is there too. It looks like that driver has problems though. I'd be surprised if it works well for you.

Mmm, well they are both rev4 at least. I would certainly try the other port to see if anything changes there. Otherwise, yes, we'd need to see what actually happens when it fails. If the link is still up is there anything in a packet capture for example. Anything logged in the macstats for the interface.

Some are supported by sfxge(4) but that driver is not in 2.7.2 by default.

@provels said in ZFS on SSD RAID10 efficiency: @sergei_shablovsky Have you tried running systat -iostat to see if you even have any bottlenecks? Need to remind that is NOT situation where some bottlenecks already limiting overall pfSense performance or create some kind of problems. Till now I collecting info (by LibreNMS, Prometheus and ELK) about how exactly which type of workload impact on server’s hardware resources consuming. To be prepared for situation when workload spontaneously rapidly growing. In my mind, I think RAM for /var and /tmp and proc cores/GHz are the most important, followed by a disk redundancy strategy like a mirror set. My initial question was about FreeBSD and pfSense FINE TUNING and Also need to saying the time are running, FreeBSD changing (and pfSense+ version already using 15-CURRENT, but pfSense CE - still on 14-CURRENT), additional pfSense’s packages updated,… so IMPACTS ON DISK SUBSYSTEM are changing accordingly… So periodically need to re-tuning both pfSense and FreeBSD. After that, I'd opt for server redundancy/cold spare. Of coarse, HA would be implemented. You're already shipping the logs to another server anyway.

The N100 seems plagued with problems but I'm not sure if that's actually anything to do with the platform or just that they seem to be favoured in as-cheap-as-possible chinese boxes with half-baked firmware. Particularly the power management seems incredibly variable from the reports we've seen on the forum. But that's unlikely to be anything to do the PMC. It looks like that code doesn't yet know about the N100 specifics. I wouldn't expect that to be an issue though.

@RobbieTT said in Enhanced Intel SpeedStep / Speed Shift - Are they fully supported?: @Sergei_Shablovsky It's just iPerf generating or receiving traffic. In this specific example I am just using it with the GUI that is iPerfUtil but it remains iPerf under the easy controls so it works with any other iPerf network client. Thank You for answering! Do You testing iPerfUtil with iperf3? Could You be so please to give me a link on iPerfUtil ? Thank You!

@stephenw10 said in Quectel EP06-E LTE Module changes pfSense+ NID after cold start or hard reset: AT+QCFG=“usbnet After all, the Modem will respond to " AT+QCFG="usbnet",? "

@alleykat said in Normal Operating Temp NG-4200: How do you reset RRD? In Status > Monitoring > Settings (Advanced). The default value for SpeedShift is 80.

At the command line run: echo 'if_re_load="YES"' >> /boot/loader.conf.local echo 'if_re_name="/boot/modules/if_re.ko"' >> /boot/loader.conf.local

You can manually create ZFS snapshots at the CLI in CE, assuming you are running ZFS. However there are no public 2.8-dev snapshots yet.

@stephenw10 yeah. It's a FreeBSD issue. Amdtemp only supports families up to 17h. The 5700G is 19h.

ECC RAM is a nice to have thing and or but for a 24/7 running device it makes sense. The TPM module I am using in the PC Engines APU6B4 I was able to buy one from Dasharo, I was soldering a 10 Pin header on the bard and then I connect the TPM module there, together with the latest BIOS version (19.01) the BIOS recognizes the TPM module but pfSense itselfs is not taking any advantage of the TPM module. Perhaps with the next BIOS it could be something is on change at this point.

@stephenw10 Hi Stephen, Just to say after so much trouble with this, I learnt that a work colleague of mine had the FS BOX which I just borrowed to recode the SFPs to Intel. As soon as I had done that and plugged them in, they came to life immediately without any need for tunables or other tweaks to get the link working. It's working on autoselect / autodetect with a fresh install of pfSense. Thank you so much for helping me out with this, but I hope this thread is of use to others: any recent FreeBSD install or security appliance designed on top of FreeBSD using Intel SFPs, you really need Intel-coded SFPs otherwise it just won't work!

@coxhaus Only floating rules have a direction. WAN/LAN/etc are only for inbound packets on that interface. Unbound can forward, but if you do that uncheck the DNSSEC option which is on by default.