Thanks for posting this been looking at those little boxes for a while thinking about them. OpenVPN with AES should be fast as there is hardware side silicon.

Now. I change my plan about use Dell Computer to install PFSense.
I plan to buy new computer.

Ok that would be perhaps better!

My Idea.

Buy something pfSense would be really matching.

1.) Use ASUS Mainboard and Intel Core i5 Gen 4 and Disable LAN on Board.

150 € board + 150 € CPU = ~300 €

2.) Use Intel LAN Card (Gigabit) 2 card

~50 €

3.) Use HDD Sata III 1 TB.

~70 €

4.) Use RAM DDR III 8 Gb.

~100 €

If have your idea or problem please advice me. ^^

If you need WiFi urgent and a mSATA should be an option or you want to insert
a modem and a SIM slot is needed you can get some new firewalls here:
nertgate Shop
pfSense Shop

If you don´t need this all or want connect a WiFi AP and a SSD or SATA_DOM is also going
you can buy also something to self assemble from Supermicro.
Supermicro  A1SRi-2558F ~260 €
Supermicro Chassis SC101i ~80 €
2 x 4 GB DDR3-1600 ECC RAM ~80 €
Samsung840 Pro 256 GB ~120 €

Its your lucky day Gigabyte GA-9SISL

Alternatively you can go by the similar looking ASRock board
ASRock Intel Avoton C2750 2.4GHz/DDR3/SATA3/V&2GbE/Mini-ITX Motherboard and CPU Combo C2750D4I COLOR BOX

yes.

If somebody doesn't have/need for higher bandwidths than what's benchmarked in my linked post, it's a rock solid piece of hardware.

Update:

Setting PowerD to: High-adaptive and using iperf from pc to pc, i get approx 650-700mpbs

What about a 100mb connection on OpenVPN? If not the whole 100 Mb what would you think it would get up to

@uvillx:

It looks like the APU is out of stock for at least 2 months.

http://store.netgate.com/APU4.aspx

Says in stock when I looked this morning.

NanoBSD is good enough for most home users, and what I would recommend in your case, unless you just want an SSD and the ability to run SQUID and SQUIDGuard, and have other benefits of persistent storage.  With an SSD and the non nano distribution of pfsense you REALLY need to have a UPS to plug your firewall in to.  A couple of nights ago I had to reload the OS on one that sustained several power failures which hosed the filesystem.

There is a different driver for the APU LEDs that makes them show up as /dev/led entries, but the licensing on the driver was a bit odd, I'm not sure that ever got properly cleared up to include it.

putting a disk or SSD in a nanoBSD system and using it for /var and /tmp.

Exactly this I was meant!

I see, then it's no point in that solution and i didn't expect a 80-100$ switch to be capable to new fancy only basic stuff

For sure they do but not in way you where trying it.
As I wrote at first only between two devices you will be able to set up one the LAG!

I probably go for other switches with 10gbe ports, uplinks and stackable functionality.

It is not a must be, but one other try out to safe ports and gaining the real throughput on top.
The Switches from Zyxel you are using are great, and if you set up only 2 LAGs from the pfSense
to each switch would be really sufficient enough I think. Stackable would be good if the entire network
is growing up. The D-Link DGS1510-24 is offering 10 GBit/s for a smaller budget. But all this is also
pending on what you have also inside of your network! I mean the whole network topology.

To connect the FreeNAS to the switches you could also go by static LAGs by setting them up then
manually and not over the LACP and then choosing something like weighted round robin if you are
using iSCSI. Would also help a little bit more to saturate the LAG links.

1x HP NC364T PCI Express Quad Port Gigabit Server Adapter

This would be powerful enough in my eyes to set up a LAG with two lines.

@VSpike
Could also being interesting for to to solve it out or better understand it.
Tuning & Troubleshooting Network Cards

The NICs are server grade ones.

The computer has 4Gbytes RAM.

Attached is the MBUF usage graph.

thanks

MBUF.png
MBUF.png_thumb

It depends on your budget.

The Samsung EVO series don't have a TBW spec, but our long term endurance testing has shown that they fail much earlier than the Samsung PRO series.  There's a very clear difference between TLC and MLC - we have a couple of 840 Pro SSDs that have exceeded 1.5 petabytes and still going, and I've seen reports of some with over 2 petabytes.  The difference in cost is a couple of hundred dollars between the 850 EVO and 850 PRO which I think is well worth it.

However, I would suggest you look at the Intel 750 Series NVMe PCIe SSDs.  NVMe SSD storage is substantially faster than SATA based SSDs, running around 2.4GB/s read speed, 1.2 GB/s write speed, with around 400K+ IOPS on random writes.  The 400GB version is around $500 and the 1200GB version is $1200, as I recall.

Unlike the Intel P3700 series which is intended for data center use, the 750 series is intended for enthusiast/professional users.  I've been stress testing a couple of 1200GB drives in a lab for a couple of weeks, and based on the early results I think we'll be ordering a lot of them.

Have you checked to see that you have the TX side of the SFP in the switch connected to the RX side of the card, and vice versa?  Unlike copper ports, which in most modern switches are auto-uplink,  with fiber you must make sure TX is connected to RX and not TX to TX, RX to RX.

Your switch is a managed switch.  Have you logged into the management interface of your switch and checked the port configuration and status?

It's a good question. I have run up against something similar (no exactly the same error messages from the disk driver) on a Jetway board:
https://149.20.54.209/threads/installing-freebsd-10-0-on-jetway-board-fails.44819
The system with this board is stuck on pfSense 2.1.5 I am not in a position to do mess about with trying to load FreeBSD 8.3, 9.0, 9.1, 9.2, 10.0, 10.1 on it to see when it goes wrong and to push the issue upstream. The post I referred to there is going nowhere. I guess nobody cares, and for me it is few hundred dollars loss to buy new hardware some time - have to think of something to do with the old hardware.
There seems to have been some underlying wholesale change in some disk drivers at some point and it is broken on some (presumably less used with FreeBSD) hardware. Bit disappointing when these sort of changes happen that "randomly" junk people's hardware.

So perhaps the Intel NIC is not able to use the given maximum from 2 x 10 GBit/s and 2 x 1 GBit/s.

But you could this test out by using a server stress test tool like the one from PRTGs website
this would be suficent to produce some really hardcore traffic and you will be able to see
how the NIC is acting on this stress test perhaps also a good test to see whats your pfSense
hardware is able to perform. Here is the link: Webserver Stress Tool
In the upper right corner you are able to switch to the English language.

great news

please  add [solved] to your thread, so others with similar problems can find a fix quicker

Yes, QuickAssist will be better, as it supports more compression/encryption types.

Get a purpose-built wireless access point.

High-Performance Mini PCI-E wifi cards don't exist.  At least not in FreeBSD.