That's not going to affect anything at 1G rates.

What is that port linked at on the modem? It's a 10Gbase-T port?

As I explained I would expect to find no way to set that adapter to 1G. It will only link correctly at 10G. That fact it works at all though seems to imply it probably is linked at 10G....

@Guillaurent said in Intel Celeron N2830 as 2.5Gbps router:

Celeron N2830

Yes, that's a 10 year old CPU. I would look at something newer if you;re buying a new device.

I'd guess, because I've not tested that personally, that it wouldn't pass 2.5G in pfSense. It might do 2G but there wouldn't be much overhead.

Steve

We need actual port numbers of some sort in pfSense at least because the order is not what might be expected given the NIC naming.

It's very unlikely we would change it on something that has been released but all input is welcome for future products.

Steve

@tim4532 said in Proxmox SR-IOV VF pass-through to pfSense VM:

FYI: My board got 2x 1G and 2x 10G ports.

I would definitely use one of the 10G for pfSense WAN set for vtnet0 connected directly to your ISP modem. Once you assigned say ens2f0 to vtnet0, you don't need to passthrough the entire NIC, just plug the cable from your ISP and it will automatically passthrough...same goes for LAN if you have an external switch, do the same as you did with WAN and connect Proxmox's management port to the switch...you would have one port available for whatever you want.

Of course FreeBSD supports multiple devices. 🙄
pfSense is a firewall/router and was never intended to support multiple storage devices other than as a drive mirror. That's not to say it can't be done. If you search the forum there are multiple threads with users describing their own solutions for making it work. However all of them operate outside the default pfSense config such that if you need to reinstall and restore for example you need to be sure you can restore any custom scripting you added.
It's far simpler to just install and boot from the larger drive directly.

Steve

@stephenw10 Thank you

Take a look at a HP t620plus thin client, it needs to be the plus model though not the t620.
The t620plus is thicker than the non plus because it has a pcie port to add a network card.

They are quad core 2.0ghz and use around 12-15w of power, you can find them on ebay for around £100.

The link below has some good information on the t620plus.
Link to parkytowers site

I can confirmed this also happens with FreeNAS USB installers.

@stephenw10 probably, I'm not super knowledgeable on how this stuff works in the back end. It does make sense that its a driver limitation, or maybe bug? Either way its nice that autoselect works as it should. Can't wait to get my other cards in and top out my provisioned speed. I can see when running a speed test it maxes out my 1Gbe nic in my desktop 😂

All of those links take me to a page that requires login on aliexpress.

Is there any reason the official netgate solution wouldn't work for you?

I'm not sure if the SG-3100 would work for the home, office and guest setup using the LAN and OPT1 interfaces. Not sure if the RT-AC87u setup as an access point with a separate guest login would prevent the guest users from accessing the rest of the LAN it's connected to. My feeling is it wouldn't so you might need another interface and AP for the guest if that's the case (SG-5100).

If price is an issue, I hear good things about the apu2 platform.

@greedj Thank You!

Primary I mean running pfSense only on bare metal servers w/ 2 CPUs. No any reason to run virtualization because of highloading, even more: better to make HA cluster of pfSense (with two(2) independent online-interactive UPS - each to one of server’s power supply, and more than 2 uplinks to power provider).

Generally speaking most things should work. If something works with FreeBSD 11.1 it will almost certainly work with 11.2 or 11.3 (or 12). The sort of regression that would prevent that is very unusual.
Brand new hardware may require FreeBSD 12 for example or even not be supported at all so it's better to use stuff that has been around for a while in most cases.

I don't have any specific recommendations though.

Steve

2nd vote for an SG-5100.

What are the specs on it? Is it even x86?

Steve

@alpineaudio said in pfSense hardware selection help:

@akuma1x said in pfSense hardware selection help:

firewall black-boxes

and more specific, this one's an i5 https://www.amazon.com/QOTOM-Q355G4-Factory-Firewall-Multi-Function-Appliance/dp/B06XNWLR3J/ref=sr_1_fkmr2_2?keywords=pfsense+firewall+black-boxes+i5&qid=1553882807&s=gateway&sr=8-2-fkmr2

This one is a much better choice!

I'm going to get up on my soap box here... keep in mind, you should try to support the pfsense open source project as much as you can. With the Qotom box you found, you're only about $60 away from the "official" Netgate SG-3100 box. I'm not trying to guilt you into a purchase, and I'm not saying you're going to get a better experience with name-brand or not, but being that close in price, I would send my money to Netgate and the firewall project itself.

Jeff