10 hours ago, jonathanm said:

Obviously.  But that has nothing to do with my comment.

 

He stated his wifi quit working, which has nothing to do with the internet. No gateway = no access to internet, but you can still use wifi to access local resources. My wifi stays up just fine without the unifi docker, I wondered why his went down.

"Obviously" I assumed their server wasn't connected VIA wifi as they stated in their next reply. 

15 hours ago, CHBMB said:

I've got a separate mini PC for my Pfsense box, it is amazing, only been running it for a few months but don't know how I managed without it.  Treat yourself.  

 

We have a couple of reviews on our website of pfsense boxes.  Here and here.

 

I myself use a different box again, but never got around to writing a review article... 

 

Dang, now you've got me researching this  The JBC313 looks really nice, and costs less than I expected. I'm curious what you went with?

9 minutes ago, ljm42 said:

Dang, now you've got me researching this  The JBC313 looks really nice, and costs less than I expected. I'm curious what you went with?

for curiosity, why just not to use router hardware? will be much cheaper  are there some unique pfsense features? 

i'm familiar with Mikrotik routers/switches, and they are working just fine. see here: https://routerboard.com/

5 hours ago, uldise said:

for curiosity, why just not to use router hardware? will be much cheaper  are there some unique pfsense features? 

i'm familiar with Mikrotik routers/switches, and they are working just fine. see here: https://routerboard.com/

pfsense only cost my £60 for a dual nic as I'm running it in a VM.

 

Can't comment on comparison features, but pfSense allows me to not only be secure, but block ads at the network level, run really smart QoS at the network level, VPN at the network level and squid cache to speed up page loading times

all those does Mikrotiks too except Squid Cache

1 hour ago, DZMM said:

pfsense only cost my £60 for a dual nic as I'm running it in a VM.

 

Can't comment on comparison features, but pfSense allows me to not only be secure, but block ads at the network level, run really smart QoS at the network level, VPN at the network level and squid cache to speed up page loading times

 

Any chance you can share your QoS config ? :), Never did quite get mine working at home. Best I managed was using limiters that attempt to share the connection 50/50 with each connection (Believe it described a connection as something actually using traffic rather than a simple socket)

 

Running PFSense on my Gen7 HP Microserver with a quad port nic. Used to run it in a VM but I was using bridge interfaces at the time and caused me many issues with VLANS, wouldn't have that issue if I passed through the card but I must admit I like been able to reboot my UNRaid box and not lose internet.

 

Been looking at some fanless pfsense boxes, but not quite decided yet. Could then turn the Microserver into a backup of my unraid server.

Edited June 11, 20179 yr by Tuftuf

3 minutes ago, Tuftuf said:

 

Any chance you can share your QoS config :), Never did quite get mine working at home. Best I managed was using limiters that attempt to share the connection 50/50 with each connection (Believe it described a connection as something actually using traffic rather than a simple socket)

 

Just now, DZMM said:

 

 

 

Here is one I prepared earlier ! Thanks 

Just now, Tuftuf said:

 

 

Here is one I prepared earlier ! Thanks 

you're welcome  

 

Might not be the proper way, but it works for me

4 hours ago, uldise said:

all those does Mikrotiks too except Squid Cache

Pfsense can be run on a full PC, with much more CPU and RAM than typical consumer level routers.

 

To get the equivalent amount of power out of an off the shelf router you would need to spend MUCH more.

37 minutes ago, jonathanm said:

To get the equivalent amount of power out of an off the shelf router you would need to spend MUCH more.

about what power levels are you talking about? very large network?

i have some Mikrotik devices in small offices too, all working without any problems..

for home usage Mikrotiks are more than enough.. 

3 minutes ago, uldise said:

about what power levels are you talking about? very large network?

i have some Mikrotik devices in small offices too, all working without any problems..

for home usage Mikrotiks are more than enough.. 

Multiple VPN sessions with strong encryption running at full line speed along with VOIP and general usage all without hiccups. There was a HUGE difference when I switched from a general purpose router to a PC running pfsense, the little router box just didn't have the horsepower to keep up with everything at once. I thought only getting 20% of available throughput from my VPN was normal until I switched.

2 minutes ago, jonathanm said:

Multiple VPN sessions with strong encryption running at full line speed along with VOIP and general usage all without hiccups.

are this typical home usage scenario?

i have some site-to-site VPNs on these Mikrotiks, but not using them at full line speed and all at once..

so, for every one it's own  i can deal with experience i have, you with yours. 

7 minutes ago, uldise said:

are this typical home usage scenario?

i have some site-to-site VPNs on these Mikrotiks, but not using them at full line speed and all at once..

so, for every one it's own  i can deal with experience i have, you with yours. 

You asked why someone would want to use pfsense, so I answered. It's a whole lot cheaper than running equivalent name brand routers.

 

Telling someone else to use lower powered equipment because it suites you doesn't make much sense.

 

You do you, I'll do me.

14 hours ago, jonathanm said:

You asked why someone would want to use pfsense, so I answered. It's a whole lot cheaper than running equivalent name brand routers.

 

Telling someone else to use lower powered equipment because it suites you doesn't make much sense.

 

You do you, I'll do me.

Thanks for sharing! i never noticed any slowdowns on my rooters/switches, that's why i asked.

i'm currently in progress of building 10G network for my home with Ubiquity es-16-xg as  main switch.

22 hours ago, uldise said:

Thanks for sharing! i never noticed any slowdowns on my rooters/switches, that's why i asked.

i'm currently in progress of building 10G network for my home with Ubiquity es-16-xg as  main switch.

 

Just be aware that if you are making use of the 10GBase-T Copper (RJ45) ports with current 10G integrated systems (Supermicro 5028D-TN4T for example), you'll be dealing with connection stability issues -- this is the only black mark (IMO) on this great switch.

Ref1

Ref2

 

Note that firmware v1.7.1rc1 was recently pushed out -- this improves SFP+ DAC (you will need this for some Amphenol DAC cables).

7 hours ago, avluis said:

 

Just be aware that if you are making use of the 10GBase-T Copper (RJ45) ports with current 10G integrated systems (Supermicro 5028D-TN4T for example), you'll be dealing with connection stability issues -- this is the only black mark (IMO) on this great switch.

Ref1

Ref2

 

Note that firmware v1.7.1rc1 was recently pushed out -- this improves SFP+ DAC (you will need this for some Amphenol DAC cables).

Thanks for this!

i'm at v1.7.1.beta1 currently, and will use Brocade BR-1010/1020 and Mellanox Connectx2 with Cisco/Brocade ACTIVE DACs..

 

On 6/11/2017 at 0:33 PM, jonathanm said:

Pfsense can be run on a full PC, with much more CPU and RAM than typical consumer level routers.

 

To get the equivalent amount of power out of an off the shelf router you would need to spend MUCH more.

I've been thinking about installing a pfsense box on my network. I see lots of SuperMicro servers for sale on eBay that are being marketed for pfsense at a really good price and warranty. Much cheaper than most of the fanless units. Googling shows they don't seem well liked on the pfsense forums though. I know some of the parts are used, but still a 3GHz quad core CPU and 2 year warranty for half the price? I'm not sure why the bad rap?

1 hour ago, wgstarks said:

I've been thinking about installing a pfsense box on my network.

Don't you have any older desktops hanging around? I'd get my feet wet playing around with free hardware even if it's older, once you play around with it and see what it really needs to work you may not really need that much horsepower. Even a 5 year old low end desktop has more cpu and ram than pretty much any off the shelf router, and all you need is another GB or 10/100 card to supplement the onboard NIC.

 

I'm running some seriously low powered equipment and it still runs rings around most modern routers.

6 minutes ago, jonathanm said:

Don't you have any older desktops hanging around? I'd get my feet wet playing around with free hardware even if it's older, once you play around with it and see what it really needs to work you may not really need that much horsepower. Even a 5 year old low end desktop has more cpu and ram than pretty much any off the shelf router, and all you need is another GB or 10/100 card to supplement the onboard NIC.

 

I'm running some seriously low powered equipment and it still runs rings around most modern routers.

I've got a low end macmini I could use I guess if pfsense can be run as an app (not sure about that?). The single nic may be an issue though.

Just now, wgstarks said:

I've got a low end macmini I could use I guess if pfsense can be run as an app (not sure about that?). The single nic may be an issue though.

Nope, pfsense is the entire OS, not just a program. And you do need 2 NICs.

 

Maybe some nerd buddies with old PC's they wouldn't mind donating? I don't think any apple hardware is going to work.

8 minutes ago, jonathanm said:

Nope, pfsense is the entire OS, not just a program. And you do need 2 NICs.

 

Maybe some nerd buddies with old PC's they wouldn't mind donating? I don't think any apple hardware is going to work.

That's why I was thinking about something like this. I'm sure it's overkill, but not nearly as expensive as the fanless units.

On 6/6/2017 at 4:28 PM, limetech said:

 

In the /etc/nginx/nginx.conf file it specifies:

    ssl_certificate          /etc/ssl/certs/unraid_cert.pem;
    ssl_certificate_key      /etc/ssl/certs/unraid_key.pem;

And in /etc/ssl/certs there is:

unraid_cert.pem -> /boot/config/ssl/certs/Tower_unraid_cert.pem*
unraid_key.pem -> /boot/config/ssl/certs/Tower_unraid_key.pem*

(symlinks to certificates stored on flash named after the server name)

 

Those are the files you would update.  Note that if you change the name of your server, those file names change as well.

 

Is there a way to restart nginx to use the updated certs or do we have to reboot? I am working on a script that detects when my LetsEncrypt certs change and copies them to the flash drive for unRAID to use, just trying to figure out how to activate them:

   https://gist.github.com/ljm42/fbf73bf4d3a9a7322f2466ae48c0e75b

 

/etc/rc.d/rc.nginx restart

 

6 hours ago, bonienl said:

/etc/rc.d/rc.nginx restart

 

 

Well that was easy I guess I assumed there was more of a tie-in with unRAID but I can confirm this is all it takes to reload the certs.  Thanks!