Which ports should I assign (I am guessing not all 4) ?. And why not all 4?

I searched the forums and googled for compatible NIC's and did not find anything. Can someone please tell me what 1GB PCI NIC's are compatible? Every 20th tip (felt) here is ending or holding something about, take Intel if you can instead over the Realtek once. Used or refurbished once from the eBay might running well for 10 Euros.

In line with the fanless / no moving parts theme I would get a cheap SSD. https://smile.amazon.com/ADATA-ISC3E-Industrial-Grade-Temperature-ISC3E-008GT/dp/B01LYD5FXT/ref=sr_1_10?s=pc&rps=1&ie=UTF8&qid=1490286944&sr=1-10&refinements=p_n_feature_three_browse-bin%3A14027456011%2Cp_85%3A2470955011 https://smile.amazon.com/Transcend-MSA370-mSATA-Solid-TS32GMSA370/dp/B00K64HXRS/ref=sr_1_8?s=pc&rps=1&ie=UTF8&qid=1490286944&sr=1-8&refinements=p_n_feature_three_browse-bin%3A14027456011%2Cp_85%3A2470955011 If you want you can even do a flash drive install on 2.4 BETA but I wouldn't unless you have enough RAM for a RAM disk. https://smile.amazon.com/SanDisk-Cruzer-Blade-Flash-SDCZ50/dp/B00HR36OC6/ref=pd_sim_147_3?_encoding=UTF8&pd_rd_i=B00HR36OC6&pd_rd_r=DB9C6EMGB784ZEZQW7RA&pd_rd_w=livND&pd_rd_wg=V2PGn&psc=1&refRID=DB9C6EMGB784ZEZQW7RA If you want totally fanless check out picoPSU's. You can get an 80W non-WI and 60W AC/DC adapter shipped for ~$40. Great if you are looking for a totally silent box. http://www.mini-box.com/picoPSU-80-60W-power-kit

@VAMike: the elephant in the room here is that linux can route 1gbps on that hardware just fine–the issue is scalability limits in freebsd/pf... @newabc: In my memory in college in China around 1999, the teachers in network center use a FreeBSD machine with pentium 166 as a BGP router for the whole campus. At that time, FreeBSD is perfect for network already. pfSense is based on FreeBSD. I think he was commenting on that? Which btw, are there any long term plans to upgrade PF in FreeBSD to address this? EDIT: answered my own question https://www.netgate.com/blog/further-a-roadmap-for-pfsense.html pfSense software version 3.0 is a longer-term project. pfSense 3.0 is a major re-write consisting of 4 major components… ...Third, the core of pfSense (pf, packet forwarding, shaping, link bonding/sharing, IPsec, etc) will be re-written using Intel’s DPDK... ...We have a goal of being able to forward, with packet filtering at rates of at least 14.88Mpps. This is “line rate” on a 10Gbps interface. There is simply no way to use today’s FreeBSD (or linux) in-kernel stacks for this type of load. Since this work is only available on certain, select Ethernet cards (mostly 1Gbps/10Gbps/40Gbps Intel interfaces as well as various VMware and Xeon ‘virtualization’ NICs. Other vendors, including Broadcom, Myrianet, Chelsio and Cisco have shown interest. This also means that the underlying kernel and system will be 64-bit only... https://www.netgate.com/blog/pfsense-around-the-world-better-ipsec-tryforward-and-netmap-fwd.html Back in February, I wrote a blog post that discussed our plans for pfSense software version 2.3, which is now in alpha, and our plans for pfSense 3.0. While I promoted DPDK then, we’ve since found that netmap provides a simpler API, and substantially better safety, as the device drivers remain in the kernel, rather than running in userspace with DPDK. Still, DPDK provides a set of libraries, such as longest-prefix match, which uses a variation of the DIR-24-8 algorithm for routing lookups, which we should find useful in our pursuit of the ultimate open source software router.

Is this going to be too much for the APU 1D? APU2C4 Jetway NF9HG-2930 if this might be not really strong enough! But the best way in my eyes is to insert a small Layer3 Switch such as the following A D-Link DGS-1510 or Cisco SG350, they will route between the VLANs if this is needed with wire speed if not needed you can also go with a Cisco SG220 switch, that is really fast and wicked. then the APU1D would be enough for it or one from the both other named above boxes.

Use case: home FW (filtering / Snort / Malware mitigation / VPN (1 user)) (may be other features I find worthwhile or educational) A router only device is not needing this Hardware, a Firewall needs some more horse power and a fully odr nearly UTM device is taking with each Point the packets are passing more and more away from the entire throughput! So it is even more interesting what do you expect form that device after processing all things such as IDS (Snort), ClamAV (AV Scan) Proxy (Squid,) pfblockerNG and other packets. If you have or own that hardware it is really nice, but if want to buy new hardware you should be have a look on more common and less powerful hardware if that will fit your needs too.

Guy on ebay selling them for cheap: http://www.ebay.com/itm/141760352711 It is a good motherboard choice.

You are prob right - and usb prob likely where that might happen.  But when he says card, I don't think about usb adapters..

Works.  :)

@jimp: For a card that old, especially with an Intel chipset, I wouldn't expect it to have a problem. You might try a 2.4 snapshot in case it needs a newer driver. If the card works in another operating system, what is it detected as there? Hi problem solved by changing to a AOC-SGP-i2 card not a AOC-SG-i2 - the older card I think wasn't compatible with my machine. I've been up and running a few days now - trying to get my head around traffic shaping now https://forum.pfsense.org/index.php?topic=127444.msg703386#msg703386

@chpalmer: If it is really running that hot you will burn your finger if you were to touch the heatsink.. Might help to tell you if its an accurate reading or not. Check it with a meat thermometer. Only time mine got that hot was using offloading. A good rule of thumb (no pun intended) I learned when working on outboard motors is that 140F (~60C) should be hot enough to hold your finger on the powerhead block (or heatsink in this case) for a few seconds before it becomes uncomfortable.

@kobzar: yes, in the documentation on wiki you can found next: Write the image to a small CF card, 256MB or less. Larger cards will not boot. Up to 512Mb will work, because the original CF card thats installed in the X E-core series, is usally a Sandisk CF card with 256Mb or 512Mb. Grtz DeLorean

@ghostshell: I think I know what your issue is from what you posted since I custom make CF cards for people that want them ready to go, let me know if you still have this issue In the meanwhile i havn't experienced this behavior, since i don't use the standard Kingston CF cards anymore on the x550e of x750e boxes. With the High speed versions of different brands, there are no errors of this kind. I like to hear if you know the reason. Grtz DeLorean

Hi lansmurf, I purchased a DS67U3 4 days ago for one of my customers. The temperature thing interested me too. Config: DS67U3 (i3-6100U) 1x 8GB RAM module 1x 1TB 2.5 HDD aw-cb209nf wifi 2x intel nics -      BIOS: 1.03 I used Knoppix Live CD and ran a few commands to read the CPU temp while a few loops were pushing the CPU cores to the max. Testing environment: SOHO room, 25 degrees celcius, DS67U3 not under direct sunlight CPU temp while idle in BIOS: 39 to 41 degrees Celsius CPU under heavy load: 49 to 53 degrees Celsius stabilizing around 51 – 52 degrees Celsius after 2 minutes. Sadly I cannot give you temperatures while running pfSense with some OpenVPN site-to-site connections as the computer is running esxi 6.5 standalone and it’s unable to return sensors data. PROs: the perfect SOHO firewall appliance, vtx, vt-d, intel nics, powerful, silent, compact, cool. CONs: no IPMI, aw-cb209nf not recognized by pfSense

I have a pfSense build I made with a Lenovo H100s motherboard (j1800) that I bought off ebay for $15 and a Pro 1000 VT quad NIC, and a couple Intel SLC SSDs in a gmirror, running 2.3.3_1  bare metal. I can confirm that the bay trail processor works great with 2.3.3.  Iperf over 900mbs across local network, rarely goes above 30% CPU with OpenVPN tunnel running concurrently.

just swapping should be fine

I found this post https://forum.pfsense.org/index.php?topic=126463.0 If these guys are using the nanobsd firmware that is good enough for me. I tried one and got it upgraded to 2.3.3 release p1 so I'll upgrade them all and put them up for now.