The pfSense Store

Author Topic: Working Specialist Platforms  (Read 32418 times)

0 Members and 1 Guest are viewing this topic.

Offline thompsa

  • Newbie
  • *
  • Posts: 3
  • Karma: +0/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #15 on: September 06, 2011, 03:22:05 pm »
Nortel Networks

Contivity 1010 - Need to set Use device polling and manually set the MAC addresss on the 2nd interface

Offline stuxhost

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #16 on: September 21, 2011, 03:46:32 pm »
Woah, rad to see socalfreenet still kickin'! Haven't checked out the project in.... Probably 5-6 years, if not longer.

Great tutorials. I'm starting to think that it's time to be doing some major work in the pfSense wiki department.

garethevans1986 - Check out using MultiMarkdown (http://fletcherpenney.net/multimarkdown/features/) to put some of your articles in. It'll render out to both HTML and LaTeX quite nicely, and then you'll be able to have some nice looking handouts while searching for more nodes for the net, and maintain le bloggery.

Offline mnemonics.ca

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #17 on: September 23, 2011, 09:32:19 am »
Is there any plan to port pfsense 2.0 to PowerPC, mainly to take advantage of the new Mikrotik Roterboard 1000 series routers.

D.

gonzopancho

  • Guest
Re: Working Specialist Platforms
« Reply #18 on: December 30, 2013, 07:56:54 pm »
Nope.


Offline Jhe

  • Newbie
  • *
  • Posts: 1
  • Karma: +1/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #19 on: March 03, 2015, 05:54:20 am »
I installed it successfully on a Checkpoint UTM 130 via USB stick, I used the memstick-serial 2.2 release. No special instructions needed - worked as expected.

Offline UnEsxi

  • Newbie
  • *
  • Posts: 20
  • Karma: +0/-0
    • View Profile
Would it be hard to make it run on a Cisco 501?
« Reply #20 on: March 24, 2015, 08:04:23 am »
They're literally hundreds of them around and at $30 a pop make great 5 port firewalls, if only they ran pfSense. MShould run as they are 800MHz x86 IIRC, but maybe better for m0nowall due to storage capacity.

Offline Evad

  • Newbie
  • *
  • Posts: 23
  • Karma: +1/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #21 on: April 18, 2015, 09:45:17 pm »
Checkpoint UTM 270 U10 - pfSense Ver 2.2 Full & Standard Kernel - Sata HD - install to HD on another system using (I used Dell GX-620 with HP nc360t) 'press I to launch the installer'. Boot HD in the unit. WAN (Int) and LAN (Ext) are reversed.

Checkpoint UTM 570 U20 - pfSense Ver 2.2 Full & Standard Kernel - IDE HD - Unable to get Sata to boot without errors. Install to HD on another system using  'press I to launch the installer'. Boot HD in the unit. WAN (Int) and LAN (Ext) are reversed.

On both units you can remove the motherboard from the case ( Metal case blocks PCI card slot ), install a VGA card in the PCI slot, USB kbyd and USB CDROM to install pfSence.

Offline fakircz

  • Newbie
  • *
  • Posts: 2
  • Karma: +1/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #22 on: June 20, 2015, 06:47:20 pm »
Hi guys,
pfSense seems to like my McAfee Enterprise Firewall S1104 (Full 2.2.2 x64 serial).

No specific instructions are necessary, since it is basically a custom miniITX motherboard with Atom D410, 2 gigs of RAM and 4 Intel NICs, so just whack the USB stick in, select it in the BIOS boot menu and that's all.

The device has both VGA and serial port (RJ-45 Cisco-style) on the front panel so you can use either image variant. I've installed pfSense using the serial console and it worked just fine. The BIOS has a console redirection capability, which defaults to 9600 bps, so I'd recommend to change it to 115200 bps to match the BSD kernel setting.

Overall, the device works very well. NICs are labeled only by numbers 0 - 3 and use identical chips, so they can be assigned freely.
My device runs router/firewall, pfblockng, suricata, dhcp, ntp and a an IKEv2 VPN (rarely used, it's a backup in case our main VPN server goes down) and it can do around 100 Mbit/s throughput. More performance testing is yet to be done, but the CPU was definitely sweating.
It has a 500 gig SATA HDD so it can do proxy/caching, but I wouldn't have too high expectations here, since the Atom D410 isn't exactly a power house and without HW AES, it's almost useless for heavy SSL work like HTTPS decryption and filtering.

But apart from that, it's pretty decent router/firewall with IPS, especially when you can get one cheap. I paid 2000 CZK (about $83) for an unused unit.

Regads,
Tomas

//Update: The BSD driver for the Intel 82574L NICs supports the TCP Segmentation Offloading. After enabling the feature in pfSense and rebooting, there was an obvious drop in CPU load when heavy traffic was passing through. I'll get some numbers soon, but just from my current observations, enabling TSO on this hardware may be useful.
« Last Edit: June 25, 2015, 04:28:33 am by fakircz »

Offline robi

  • Hero Member
  • *****
  • Posts: 707
  • Karma: +55/-2
    • View Profile
Re: Working Specialist Platforms
« Reply #23 on: June 25, 2015, 08:34:53 am »
//Update: The BSD driver for the Intel 82574L NICs supports the TCP Segmentation Offloading.

Where did you get that information from?

Offline virgiliomi

  • Full Member
  • ***
  • Posts: 134
  • Karma: +17/-4
    • View Profile
Re: Working Specialist Platforms
« Reply #24 on: June 25, 2015, 06:03:51 pm »
From the FreeBSD em(4) man page:
Quote
The em driver provides support for PCI Gigabit Ethernet adapters based on
     the Intel 82540, 82541ER, 82541PI, 82542, 82543, 82544, 82545, 82546,
     82546EB, 82546GB, 82547, 82571, 81572, 82573, and 82574 Ethernet con-
     troller chips.  The driver supports Transmit/Receive checksum offload and
     Jumbo Frames on all but 82542-based adapters.  Furthermore it supports
     TCP segmentation offload (TSO) on all adapters but those based on the
     82543, 82544 and 82547 controller chips
.

The igb driver also supports those features for 82575 and 82576-based adapters. (igb(4) man page)

Offline robi

  • Hero Member
  • *****
  • Posts: 707
  • Karma: +55/-2
    • View Profile
Re: Working Specialist Platforms
« Reply #25 on: June 26, 2015, 02:51:58 pm »
I'd be also interested for the same features in the Broadcom chipset.

Offline virgiliomi

  • Full Member
  • ***
  • Posts: 134
  • Karma: +17/-4
    • View Profile
Re: Working Specialist Platforms
« Reply #26 on: June 26, 2015, 09:14:14 pm »
I'd be also interested for the same features in the Broadcom chipset.
I'm pretty sure there are a number of different Broadcom drivers incorporated into FreeBSD. Your best bet would be to search the FreeBSD man pages for the driver used on your system (usually the letters of the interface; i.e. igb0 = interface 0 for the igb driver) and see what it says for features.

Offline fakircz

  • Newbie
  • *
  • Posts: 2
  • Karma: +1/-0
    • View Profile
Re: Working Specialist Platforms
« Reply #27 on: June 28, 2015, 04:35:31 pm »
From the FreeBSD em(4) man page:
Quote
The em driver provides support for PCI Gigabit Ethernet adapters based on
     the Intel 82540, 82541ER, 82541PI, 82542, 82543, 82544, 82545, 82546,
     82546EB, 82546GB, 82547, 82571, 81572, 82573, and 82574 Ethernet con-
     troller chips.  The driver supports Transmit/Receive checksum offload and
     Jumbo Frames on all but 82542-based adapters.  Furthermore it supports
     TCP segmentation offload (TSO) on all adapters but those based on the
     82543, 82544 and 82547 controller chips
.

The igb driver also supports those features for 82575 and 82576-based adapters. (igb(4) man page)

Exactly. Checking specs never hurts.

Offline robi

  • Hero Member
  • *****
  • Posts: 707
  • Karma: +55/-2
    • View Profile
Re: Working Specialist Platforms
« Reply #28 on: June 30, 2015, 09:34:51 am »
Hmmm. That description is not accurate in the man page.

Supermicro A1SRi-2758F has Intel i354 nics, and pfSense loads igb driver for them. But in the man page of igb, I only find that
Quote
The igb driver provides support for PCI Express Gigabit Ethernet adapters
     based on the Intel   82575 and 82576   Ethernet controller chips.  The   driver
     supports Transmit/Receive checksum   offload   and Jumbo Frames.  Furthermore
     it   supports TCP segmentation offload (TSO)   on all adapters. 

It only mentions 82575 and 82576 chips supporting TCP segmentation offload, not a word about i354...

Offline virgiliomi

  • Full Member
  • ***
  • Posts: 134
  • Karma: +17/-4
    • View Profile
Re: Working Specialist Platforms
« Reply #29 on: June 30, 2015, 01:54:49 pm »
Hmmm. That description is not accurate in the man page.
...
It only mentions 82575 and 82576 chips supporting TCP segmentation offload, not a word about i354...
Later in the man page, under the Hardware section, it does mention the i350 and i354 Ethernet controllers are supported by the driver. However, as you mentioned, the man page does not mention that the i350/i354 support those other capabilities.

Since the i354 is integrated into the CPU as part of the C2000-series Atom SoC, there's not a lot of info about it. I looked through the C2000 datasheet (chapter 11 is dedicated to the Ethernet controller), but could find no info about offloading.

The i350, however, was sold as a separate Ethernet controller, and according to the Intel ARK, did support "Intelligent Offloading". Whether the FreeBSD driver will work with the i350 or not for offloading, that might be left to experimentation.