Just got my service installed today, Core2Duo is running this thing just fine with 30-40% CPU load [image: 5305865960.png] Area is still under upgrade, upload / download will be a bit higher. So far, happy, no need to upgrade :) Thanks all for your input/help.

What is scary here? if you are aware to use that card please don´t use it, but don´t tell me that I should not suggest it or use it by my own, thank you. I didn't tell anybody what they "should" do; I simply mentioned the issues with ebay lottery. Sorry you took it that way, it's not what I meant. I was not speaking about faked cards or cheap Chinese reproductions here, I was talking about refurbished cards or used items at eBay and not the new ones! And yes this cards will be able over eBay or Amazon.xyz refurbished and/or used for $99. Fair enough - I looked some time ago to some auctions and personally, I couldn't tell the difference between a "fake" refurbished and an actual one. The pictures were reused and some comments indicated some sellers were dishonest. But that was just my experience. I think the network card is great and it would have been amazing to see that the so-called OEM cards were somewhat reliable; a 4x intel card at around ~50$ would make a lot of folks happy :) Yes this is right but this ones are then the pretty newer one that will be not in usage before, or so called factory new or brand new. This ones I love too, for 200 € - 300 € here in Germany (Intel i350 & i354) this are fine cards acting fast and stable, in my eyes. I'm still debating whether for a home firewall (with 2 ports) a 4x card would make sense. The network card has bigger buffers but at the same time it looks like the power consumption is higher  as well…

See this previous post (has some nice links): @sudonim: From my research and experiments, you need an older system that uses an "em" driver card not an "igb" card. https://kdemaria.wordpress.com/2015/04/22/how-to-configure-pfsense-2-2-2-for-centurylink-gigabit-seattle-edition/#comment-300 You might have bad luck with PPPoE and gigabit with an igb card because of this issue: https://redmine.pfsense.org/issues/4821

You have to compile the kernel with that option in the kernel config file.

@edwardwong: @Limbi: @edwardwong: Try not to use -evp option, it looks like everything with this option will trigger the hardware engine. And your CPU is quad core, you can actually put a "-multi 4" as the option to run 4 encryption together. But that's quite interesting, because I owned a higher end processor, the Avoton C2550, and the number with 4 threads together is half of your single thread. Not sure if this is the problem with the OpenSSL on my Linux server (yes, this is not a pfSense machine). I suppose my Avoton should be running a lot faster compared with your N3700. Where I should put "-multi 4" to run 4 encryption together? Thank you Ciao Read the posts above, answer is already there. I read that, but I'm a newbie and I don't know witch file to edit.

zbox ci323 is a better local solution

take a look at the unifi AP.. their new AC line is very reasonable priced with lots of features.. the lite goes for $89 while the pro is $149.. https://www.ubnt.com/unifi/unifi-ac/ Another advantage of the external AP is allows you to properly place for best coverage vs where your pfsense box is located..

It would be in the 45w-70w range depending on your power supply. I had for a while a machine with an e8400, a cheap Acer m-atx motherboard with igp and a couple of ddr2 slot both filled with an 1GB single rank ddr2-800, an intel pro/1000 pt dual and finally an v300 ssd. It pulled 54w while idling. I did some math, in my country energy cost roughly 0.2€/Kwh so each watt cost 2€ per year after some calculation. I did a quite complex excel file to take into consideration every variables, so I'm pretty sure. You can expect almost 110€ per year on electrical bill or 9€ per month if you prefer. Of course, your mileage may vary a lot depending how the electrical bill is calculated then the cost of the energy per Kwh, I bet it would cost less but not enough to don't take into consideration to buy brand new low power parts as I just did. Replacing the cpu+mobo+ram combo and then the psu with an old 500w+ 80plus I already had it dropped the power consumption at just 20w. At worst. I can go further with a pico psu or a brand new psu, but right now I'm quite satisfied, I save more than 70€ per year whit much more power available. Ciao.

Netgate RCC-DDF is the correct system id string.  Sometimes the marketing name and the engineering name for a product don't match up, (sometimes the name changes too late in a software release cycle).  It maybe not ideal, but its functionally correct.

@messerchmidt: my above post + 1pci network card if your on the cheap, difficult to do. then I would rather go for stability and choose the cheaper Intel D2500CCE, with 2 x onboard Intel LAN, and you can add 1 x PCI Intel LAN to make a 3-port setup.

Thanks, this explains a lot of things. I will check with ProxMox about why these info aren't exposed to the VMs.

BlueKobold's method worked for me. Try here for the HTML version: https://portal.pfsense.org/docs/book/ If you aren't logged into the pfsense support portal you'll get a login screen asking for the user/pass for your pfSense store account.

overkill, but sufficient add a dual intel nic, and your done

@messerchmidt: obsolete. would avoid go j1900-d3v The GA-J1900N-D3V has been discontinued in the UK, superseded by the GA-N3150N-D3V.

Thanks for reply, fohdeesha!! I try to upgrade my Pfsense v2.2.5 to v2.3 but after upgrade I seen that new pfsense does not support bind package. So I have to stay my previous version till new version not support bind or provide a way to install bind package. Thanks once again for reply and your time.

@edwardwong: @Jailer: @Perforado: Can't understand the market for a A1SRi-2358F. $50 cheaper than the C2558, lower power consumption and slow internet access that will likely never exceed the capabilities of this board. You mean C2358 suitable for slow internet access? Nope. Considering the Pentium 1037U, also a dual core processor with similar clock speed, is already able to handle 1000Mbps WAN-LAN NAT with about 50% CPU usage only, I wouldn't see how slow this C2358 will be. I would say if one is not going to add complicated functionality concerning CPU power to this setup (e.g. intercepting proxy like HAVP), I don't see why can't we just save the $50 for other purposes. Sorry, I should have clarified that I was talking about my slow internet access. The C2558 is overkill for my needs due to my slow internet access. The SuperMicro A1SRI-2358F fits my needs perfectly now and in the future. About the only thing I wish it had that it doesn't is a msata slot for an SSD but that's not a deal breaker for me either.

Brilliant - thanks a lot  ;D

ok, thanks, I'll test setting the RW before update. If all goes well I can do the updates on the other boxes.