After having issues with my Netgate 4100 (see this post) and knowing all the crap Netgate has pulled the last few years, I decided to build a new Firewall capable of 10 gig routing. Hopefully this fixes my issues. If not at least I no longer have to support PFsense.

Pictures:

https://imgur.com/lTmvj4K

https://imgur.com/iVdBMnu

Hardware:

X11SSH-F Motherboard

Xeon E3-1240 v5 CPU

32GB 2400mghz RAM

ZFS Mirrored 128gb SSDs

350W Gold Rated PSU

Connect X3 Dual SFP+ NIC

​

Should have it production ready by next week. Really not looking forward to reconfiguring all the HAProxy/ VPN stuff, but so far already found quite a few Aliases/Rules I can cleanup.

Thanks for stopping by!

Like the title says I am trying to convert a bare metal install of Server 2016 to a Proxmox VM.

So far I have backups of the Windows server (.vhdx) and I have converted them to .raw and imported them to the VM. However when I try to start the VM I get a no bootable device found and it goes into the EFI shell.

Is there an easier way?

Like the title says I am trying to convert a bare metal install of Server 2016 to a Proxmox VM.

So far I have backups of the Windows server (.vhdx) and I have converted them to .raw and imported them to the VM. However when I try to start the VM I get a no bootable device found and it goes into the EFI shell.

Is there an easier way?

So a couple days ago I posted this post about getting slow speeds to my servers at home from basically anywhere. While I am not seeing HA Proxy or anything peg the CPU I figured it's either my ISP or my Netgate 4100.

So I am now looking for a 1 or 2u firewall that I can have/place 10gig cards in them. I want to stay below $200 if possible. I don't care if it is massively overkill, I specked this 4100 based on my actual needs and it let me down.

Needs:

10gig

AES-NI support

4 RJ45/SFP+

Rack mountable

​

Wants:

Ports in front

Quiet (as long as its not louder than my Brocade 6610 we good)

Short case

So like my title states I am having slow download and upload speeds while connecting back to my servers on WAN.

For a little context I have a netgate 4100 with HA Proxy installed. If I do a speedtest from speedtest.net I get the full 1g up/down. Same thing goes for the computer at site B that I am using to test this with along with my phone.

But if I run a speedtest(using librespeed) from site B to my servers at site A I get 20ish Mb/s not MB. This is running through HA proxy with a certificate. If I directly port forward and bypass HA Proxy I get 50ish Mb/s. Iperf3 gets 100mb/s. So there is overhead but not much.

However if I go to the domain name of my hosted speed test (from site A) I will get the full 1g up/down. If I go to the IP directly I'll get 10gb/s since it's on the same VLAN.

This tells me it's not a bottleneck of the test server, firewall, or HA proxy.

So I ask what could possibly be wrong?