4gb ram limit

foomanjee

The failover box also has 8gigs

hoba

Just out of curiousity: what are you planning to do with that box?

Cry Havok

When there's 8 gigs in the box, 4 gigs is a limit :>

Only if you're actually using the 4 GB (which, with pfSense, is unlikely even if you install every package). You may find that enabling memory mirroring is a worthwhile use of that "extra" RAM.

@foomanjee:

Where's the kernel source?

You'll probably have to install the developer version.

foomanjee

@hoba:

Just out of curiousity: what are you planning to do with that box?

http://box.nevernet.com/~foo/IMG00036.jpg

hoba

I see, you want to make it glow in the dark… ;D

I rather wanted to know what packages you plan to run and what kind of bandwidth you want to push and so on...

foomanjee

@hoba:

I see, you want to make it glow in the dark… ;D

I rather wanted to know what packages you plan to run and what kind of bandwidth you want to push and so on...

Currently doing about 125mbps, and this weekend I'm bringing another 150 over. And now my boss wants me to run snort :(

hoba

ok, you should throw all ram that you can get then on the box when you plan to run a memory hog like snort with that bandwidth :D

Maybe http://devwiki.pfsense.org/PfSenseDevHome/ is helpful for you then though some of that info is pretty outdated.

foomanjee

Yeah, firewalls were on 1950's, then today I upgraded them to 2950's, since I knew I was going to have to run snort, and I was moving more traffic over..

Will check out that link - thanks.

Side note - snort sure does like blocking Akamai :(

gmckinney

@foomanjee:

Yeah, firewalls were on 1950's, then today I upgraded them to 2950's, since I knew I was going to have to run snort, and I was moving more traffic over..

Will check out that link - thanks.

Side note - snort sure does like blocking Akamai :(

If you are running in a production environment you may also want to checkout:

http://www.freebsd.org/cgi/man.cgi?query=pae&sektion=4

Just a suggestion….

gm...

foomanjee

@gmckinney:

@foomanjee:

Yeah, firewalls were on 1950's, then today I upgraded them to 2950's, since I knew I was going to have to run snort, and I was moving more traffic over..

Will check out that link - thanks.

Side note - snort sure does like blocking Akamai :(

If you are running in a production environment you may also want to checkout:

http://www.freebsd.org/cgi/man.cgi?query=pae&sektion=4

Just a suggestion….

gm...

Kind of need the kernel sources for that.. Do you guys have the pfsense kernel file up anywhere? (pfSense_SMP)