Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Tuning for full blown PCs

    Scheduled Pinned Locked Moved General pfSense Questions
    6 Posts 4 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cyruspy
      last edited by

      Hi, are there any known "best practices" when installing pfsense in full blown PCs?, i'll install it in a Dell Optiplex GX760, C2D with 2GB of RAM. Are there any kernel parameters to adjust?, i'll be running VPNs, regular firewalling and Proxy/Antivirus.

      1 Reply Last reply Reply Quote 0
      • A
        autobot
        last edited by

        With that hardware you should be able to handle quite a few simultaneous clients, I don't believe any tweaking need be done to the kernel parameters.

        1 Reply Last reply Reply Quote 0
        • C
          cyruspy
          last edited by

          I've seen some posts about setting this parameters (taken from my old notes):

          kern.ipc.nmbclusters
          kern.maxfiles
          kern.maxfilesperproc
          net.inet.ip.portrange.last

          They're no longer needed?

          1 Reply Last reply Reply Quote 0
          • jahonixJ
            jahonix
            last edited by

            They are not used that often and are hardly known.

            1 Reply Last reply Reply Quote 0
            • C
              cyruspy
              last edited by

              But "hardly known" != "useless"…. I found this: http://forum.pfsense.org/index.php/topic,14673.0.html

              Any comments?

              1 Reply Last reply Reply Quote 0
              • M
                mhab12
                last edited by

                The issues that loader.conf can cause/resolve are so pronounced that you would HAVE to modify it to even use the router at all.  If you're seeing >10% of your bandwidth come through the pfSense box/proxy, then you're likely not affected.  Most of the issues have been corrected with more recent versions of the squid package as well as bumps in the underlying FreeBSD versions.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.