I am getting 1U system NDis 166 . it has 8gb ram 64gb ssd. i7 2620M cpu. dual intel nic. It would be fast and rally powerful, but how fast is only guesswork and mostly pending on the different configuration. how good it is for pfsense wrt to vpn (no other pakeges would be running ) ? what could  be its throughput ? Again the throughput is pending and related to the whole configuration, offered services, used protocols and installed packages.

Jimp, There's an issue with the hardware (SSD) because fsck just doesn't work. Thank you for the reply.

Edit: I just looked up Supermicro's D-1548 offering. They have nothing yet. In case I am ready to pull the trigger before they actually come up with something, should I just get the 1528? I don't think my Internet speeds will goto to even 100Mbps in the next 5 years. So my only concern is openVPN over the fibre line. Anyone?

pfSense store SG-2220 or SG-2440 units should do the job RCC-VE Desktop: Atom C2000 series units are also able to realize what you want Intel Celeron J1900 or N2930 units should do this job perhaps also fanless on top PC Engines APU1d4 or APU2B4 (Q1/2016) are also good enough and fanless on top

What if you disable snort?

I have the installer from the HP website and I've copied it to the firewall, but it's an RPM. pfSense doesn't seem to have RPM installed. As explained before it isn´t there and will be never there, it is used by the packet manager from Linux and not BSD. Has anyone used the utility, or can you tell me how to install RPM? No one can do it ever, since pfSense is based on FreeBSD and FreeBSD own it first. You willing is likes to install a .msi file on a Atari or MaxOS.

It appears 60mm is the maximum length. Can anyone recommend a low-cost, compatible drive? As I am right informed, there are three different length, M.2 2242 (42 mm), M.2 2260 (60 mm) and M.2 2280 (80 mm) so it can be that you will be able to insert also a M.2 "2242" in 42 mm length, perhaps. It is more pending on how many holes are there to mount and fix the M.2 drive. The bottom side might be enlightening us all, but for getting real informations about it perhaps someone from the ADI or pfSense team could short jump in and answer this question adequate. With PCIe 3.0 x4 (2242, 2280) there will be coming up many fine options for a fast caching proxy inside of pfSense, looking towards to the M.2 (2280) Samsung950 Pro (2500 MBit/s write / 1500 MBit/s read).

I would start with a hardware audit if you don't already have it. CPU, RAM, disk, free disk space, interface cards (or motherboard if your using the embedded ethernet ports. Check if each of the host systems is supported by the release (I know that interface card support has changed) and if the hardware still matches the current an foreseeable usage profile.  Maybe a site has grown since the original installation or maybe a site has specific throughout needs. Once you have a list of the kit at each site, it may be that some of it gets totally replaced, and in doing so could become  spare / backup for the other sites while your upgrading, or alternatively get one new system. Set it up and install at one site. then take the hardware from that site, upgrade it at in your office / workshop and then swap the next site and repeat.  This method means if theres a problem at the site then you still have the old hardware to swap back in. HTH Andy

Around 30-32% Thats what i was thinking … that i could be fine for a Gigabit, but, then if its maxed out (Cpu) i don't like that. Should be at least some room :P

ugen0.5: <pixart>at usbus0 (disconnected) ugen0.5: <pixart>at usbus0 ugen0.5: <pixart>at usbus0 (disconnected) ugen0.5: <pixart>at usbus0 Hey, not sure if you've been able to fix your issue yet but I've noticed this behavior after I installed a KVM switch and I found that it was the issue. If you are using a KVM, that might be your problem. To me it doesn't affect anything GUI-wise but if you're using the shell it becomes a pain rather quickly. Hope this helps.</pixart></pixart></pixart></pixart>

Thanks for the explanation Matt  :) Currently on my Christmas break, but I will test it out and report back in the New Year. Tom.

I am having the exact problem using the msk module from creama. I use the msk as my LAN connections and am able to ping the LAN address of the firebox but not the other way around. I am also not able to do any DNS lookups. The sk module works fine and am currently using it. pfSense 2.2.5 full install Firebox x5500e bios 8.1

I´m open to upgrading the PFsense hardware to something more powerful if that would significantly increase performace. Intel Xeon D-1518, D-1528 or D-1548 with 4/8, 6/12, 8/16, 12/24 or 16/32 Cores/Threads. Intel Xeon E3-12xxv3 (4C/4T) starting @3,0GHz upstairs Intel Xeon E5-2600v3 (4C/8T - 6C/12T) starting @3,0GHz upstairs ….and 4GB of ram. 8 GB - 16 GB ECC so fast as you could get your hands on (DDR3-1600,1860 or DDR4-2133) and it will be supported by the Board and CPU! Mostly the CPU is powerful enough, but their memory system got rendered! high up the mbuf size to 1 million, because each CPU core is opening for each LAN Port one queue! if Squid is in use, please high also up the default memory RAM size (256 MB) and usage of Squid.

The problem is that the customer really wants it from within The Netherlands. Call the www.Supermicro.nl office and ask for a reseller in the NL!

Yeah I just bought 2 of http://www.ebay.com/itm/X7280A-2-SUN-DUAL-PORT-GIGABIT-PCI-e-Server-Adapter-371-0905-04-D28207-006-/252209431410?hash=item3ab8da8372:g:GzoAAOxymnFSC5qAthese: Thing is, that I don't really anything older laying around collecting dust, I'd eventually want to downsize the case and use a much smaller on and also allot smaller PSU since what I will be using from the start is not really needed. I will also have a couple of servers on the network which I am not sure how to handidly setup DDNS/dynamic dns, but all in all pfsense seems to really be an interesting alternative.

It should. The driver's there as it's always been. It doesn't get you much acceleration unless your CPU's really slow (like a Geode or Pentium II or III). In a system with a fast CPU, it'll be slower than just letting the CPU handle the crypto.

Are you able  to insert two real NICs or a real dual port NIC to see if this behavior exist also there?

Do you have a real need to be dust resistant? And even so, most fanless still has airflow due to convection etc, only a handful of cases are truly sealed which limits TDP a lot. I have seen true rugged fanless systems meant for this, but typically $1k+ and come with miserable weak cpus. Give up the fanless, take it from someone who has gone that route. The euler is a nice case (I have one) but it only works with thin-itx boards exactly and the fastest cpus it can handle are 45W TDP and only with a good ambient air environment. Finding 2 good NIC chipsets on those boards is a royal pain too. It can handle a ~2.5ghz quad but that is really pushing it, haven't looking hard at the clocks on mine (E3 1265Lv2) but I bet it turbos less than it otherwise would. OpenVPN currently still only cares about raw single threaded high clock grunt, extra cores won't help. If what you actually want is quiet/near-silent, powerful and on a budget, I'm going to parrot my usual TS140/T20 mini-server deal hunting mantra. Hopefully you aren't also obsessed with making your router as small as absolutely possible too, its like a disease…

@BlueKobold: @reilos thanks for enlighten me. No problem. Good luck with your build! Have a nice weekend!