@stephenw10:

Disabling it in OpenVPN or in System > Advanced > Misc?

In the OpenVPN client settings

@stephenw10:

Did you end up using AES-CBC or -GCM?

I can use both in the settings and get full speed (10,5 MB/s) as long as I do NOT enable Hardware Crypto. If I enable it I do not get more the 7 to 8 MB/s

Please have a look at this: https://forum.pfsense.org/index.php?topic=142311.0

Thanks for your response.  This is not good for me.  The device is at a remote site.

Not enough information to work with here however I can confirm there are no issues related to our OVA. This is likely related to configuration or ESXi.

There is no changelog for Netgate Coreboot Upgrade package, the git history is what you are after. Github link below can be slow sometimes due to the size of the repository but it nearly always loads here for me.

Try looking at the history of the Makefile for the port instead: https://github.com/pfsense/FreeBSD-ports/commits/devel/sysutils/pfSense-pkg-Netgate_Coreboot_Upgrade/Makefile

Is this just a numbers matchup??

No, one has nothing to do with other.

h, BTW, the netgate bios update procedure page https://www.netgate.com/docs/pfsense/sg-4860/adi-bios-flash.html still shows version 12,
And the bios page at https://firmware.netgate.com/bios/ does not have the current 01.00.00.17 firmware
If you are not going to keep these pages current…  could someone at least point the owners to the github site for the latest firmware.
https://github.com/ADIEngineering/adi_coreboot_public/tree/master/releases

That's bootable upgrade image, not the same as the package. Always use the package as this method provides the latest BIOS upgrades.

What does the status LED do when you apply power?

I would want to use an SSD if you are caching.

The eMMC on the SG-3100 has a high write cycle life, it's not expected to fail within the life of the device. That's with the usual disk write rates pfSense has. We do not do anything special there to lower writes.

However caching to it will increase disk writes significantly and the write life is finite so it must reduce the lifespan.

If you're using Squid/Squidguard just for filtering sites you set it not to cache which would eliminate the issue.

I would be more worried about using all available disk space with snort and squid installed to be honest. That could easily happen if you enable too many snort signatures or allow squid to log too much.

Steve

Those default limit values in the sensors widget are not really valid for the SG-3100. You can adjust them.

Temperatures in the 65-75C range are completely normal.

Steve

The first place to check would be in the system log covering the period is stopped responding.

Your description sounds like what happens if you exhaust the firewall state table, that would be logged if so.

It could also be a php issue if you are always using the webgui when it fails. That too would be logged.

Steve

Thanks,

I'll do that one night this week and let you know.

Sean

We sell power supplies separately, please contact our sales. sales@netgate.com

I don't have an SSD in my 3100 but the smartctl binary is there now, so it should be OK on 2.4.3.

If you are comfortable running a snapshot, you can upgrade to a 2.4.3 snapshot now and test. If not, 2.4.3 should be out in a couple weeks.

Thanks for the info on the UPS… But its a bit pricey for home use for what it would be doing..  If I needed more run time would just spend the money on a bigger ups for my needs.  Then again the power outages in my area very very rare even with storms.

My current run time handles the little flicker/brown outs get now and then..

I agree, this was suggested many times. I was told that this will be fixed in future website update.

ivor,

No offense taken by your asking if I actually tried to read something besides a cereal box.  I get calls frequently reporting something does not work, or "I can't figure this out"….......
Each time I start with some standard inquiries.  Folks get hot when asked if their printer is on when they complain it does not work.... and,,, oh my,,,,, who turned it off?  I didn't do that..........

Thanks again for your assistance!

There's really no need for that. Today's SSD's are a lot more resilient. While what you're asking might be technically possible it's unsupported or recommended by us.

I can attest the value of the Gold subscription.  It has been worth every cent.