[pfSense] PFSense for high-bandwith environments

2016-02-18 Thread Giles Davis
Hello PFSense Collective, At the risk of sounding slightly 'cheap', does anyone (else) on this list have experience of 'good combinations' of hardware for PFSense appliances that will handle high-traffic levels and comments on reasonable max-levels of throughput to expect from it? We've been

Re: [pfSense] PFSense for high-bandwith environments

2016-02-18 Thread compdoc
> Using Intel E3-1270s and Intel 10G Nics I can't point to a specific setup, but something to look at... Your xeon is a sandy bridge with a max transfer rate of 5 GT/s, which is very nice but the new Skylake cpus are 8 GT/s. Also, there's always a possibility of equipment failure/setup

[pfSense] openvpn site to site clients not communicating ??

2016-02-18 Thread Richard Lussier
Hi, I have a multi site setup with 1 server and 4 clients. v 2.2.6 release The clients have to reach each other. Clients cannot see each others. My wans are set to 1.1.1.2 thru 1.1.1.6 in a simple switch The server is set as described in the pfsense book 21draft : - Local and remote networks

[pfSense] pf/ipv6/RFC1323: Problem?

2016-02-18 Thread Larry Rosenman
Can someone on the pfSense team look at: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=207215 Thanks! -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: l...@lerctr.org US Mail: 7011 W Parmer Ln, Apt 1115, Austin, TX 78729-6961

Re: [pfSense] PFSense for high-bandwith environments

2016-02-18 Thread Walter Parker
There is an optimization coming for pfsense. There is a new user space routing daemon. netmap I think, that can reach line rate on 10G NICs (14.88 Mpps). There was a BSDCon that talked about a future version of pfsense using this system. It uses ipfw, so there a bit a work to adapt it to pfsense.

Re: [pfSense] openvpn site to site clients not communicating ??

2016-02-18 Thread Doug Lytle
>>> On Feb 18, 2016, at 1:01 PM, Richard Lussier richard.luss...@inter-node.com >>> wrote: >>> each client connects well to server but wont reach other clients.. >>> any ideas ? On the OpenVPN Server did you check the option: Allow communication between clients connected to this server Doug

Re: [pfSense] PFSense for high-bandwith environments

2016-02-18 Thread Rainer Duffner
> Am 18.02.2016 um 19:13 schrieb Walter Parker : > > There is an optimization coming for pfsense. There is a new user space > routing daemon. netmap I think, that can reach line rate on 10G NICs (14.88 > Mpps). There was a BSDCon that talked about a future version of pfsense >

Re: [pfSense] openvpn site to site clients not communicating ??

2016-02-18 Thread Richard Lussier
Hi, This option is not available on a site to site ssl/tls server On 2016-02-18 13:15, Doug Lytle wrote: On Feb 18, 2016, at 1:01 PM, Richard Lussier richard.luss...@inter-node.com wrote: each client connects well to server but wont reach other clients.. any ideas ? On the OpenVPN Server did

Re: [pfSense] openvpn site to site clients not communicating ??

2016-02-18 Thread Doug Lytle
>>> Hi, This option is not available on a site to site ssl/tls server If it's a fully routed network, my next step would be to use traceroute on both ends to see where it's getting hung up at. Doug ___ pfSense mailing list

Re: [pfSense] openvpn site to site clients not communicating ??

2016-02-18 Thread Richard Lussier
Hi, This option is not available on a site to site ssl/tls server If it's a fully routed network, my next step would be to use traceroute on both ends to see where it's getting hung up at. Doug Got it Doug On the server side, the rule on openvpn destination had to be to "any" instead of

[pfSense] recover vnstat data

2016-02-18 Thread Nenhum_de_Nos
Hi, I just installed a new pfsense here as a test, it worked well so far, so now I would like to take there the vnstat database files. I can't write them, the fs os RO. I would not like to open the case and shut them both down. Is there a way for it ? thanks, matheus -- "We will call you

[pfSense] Problem with new Unit

2016-02-18 Thread David Ross
Current device is an xxx running pfSense 2.0.1-RELEASE New device is an SG-2440 running pfSense 2.2.6-RELEASE I decided that trying to reload the configuration file with that big of a gap in versions was asking for trouble so I built the new configuration by hand. It wasn't that complicated.