Difference between revisions of "User:Paul/sandbox/pfSense"

From UNPM.org Wiki
Jump to navigation Jump to search
(Created page with "'''WARNING:''' This article is in a user sandbox, indicating it is a rough draft, and as such, is likely incomplete, contains buggy and insecure configurations, and is subject...")
 
 
Line 3: Line 3:
 
The pfSense project is a FreeBSD-based enterprise-grade network gateway appliance. While it does require some networking knowledge to initially set up, it is very easy, once set up, to maintain.
 
The pfSense project is a FreeBSD-based enterprise-grade network gateway appliance. While it does require some networking knowledge to initially set up, it is very easy, once set up, to maintain.
  
== Enable trim support for SSD ==
+
== Enable TRIM support for SSD ==
  
The default setting for pfSense does not have [//en.wikipedia.org/wiki/Trim_(computing) trim] enabled and enabling can only be done via console during boot by following the following steps:
+
The default setting for pfSense does not have [//en.wikipedia.org/wiki/Trim_(computing) TRIM] enabled and enabling can only be done via console during boot by following the following steps:
  
 
At the 'Welcome to pfSense' menu, selection option '2. Boot [S]ingle User'
 
At the 'Welcome to pfSense' menu, selection option '2. Boot [S]ingle User'
Line 13: Line 13:
 
  # /sbin/shutdown -r now
 
  # /sbin/shutdown -r now
  
To verify trim has been enabled, from the GUI Diagnostics / Command Prompt enter:
+
To verify TRIM has been enabled, from the GUI Diagnostics / Command Prompt enter:
 
  tunefs -p /
 
  tunefs -p /
  
Line 32: Line 32:
 
  tunefs: volume label: (-L)
 
  tunefs: volume label: (-L)
  
This can also be run before reboot to verify that trim is not enabled.
+
This can also be run before reboot to verify that TRIM is not enabled.
 +
 
 +
IMPORTANT: Enabling TRIM may [//forum.pfsense.org/index.php?topic=115929.msg668024#msg668024 cause complete filesystem failure] and destroy an installation on some SSDs.
 +
 
 +
== FreeRADIUS ==
 +
 
 +
https://doc.pfsense.org/index.php/FreeRADIUS_2.x_package
  
 
== External links ==
 
== External links ==

Latest revision as of 14:29, 11 February 2017

WARNING: This article is in a user sandbox, indicating it is a rough draft, and as such, is likely incomplete, contains buggy and insecure configurations, and is subject to substantial and frequent changes.

The pfSense project is a FreeBSD-based enterprise-grade network gateway appliance. While it does require some networking knowledge to initially set up, it is very easy, once set up, to maintain.

Enable TRIM support for SSD

The default setting for pfSense does not have TRIM enabled and enabling can only be done via console during boot by following the following steps:

At the 'Welcome to pfSense' menu, selection option '2. Boot [S]ingle User' Enter shell At the command prompt, enter:

# /sbin/tunefs -t enable /
# /sbin/shutdown -r now

To verify TRIM has been enabled, from the GUI Diagnostics / Command Prompt enter:

tunefs -p /

And it should print:

tunefs: POSIX.1e ACLs: (-a)                                disabled
tunefs: NFSv4 ACLs: (-N)                                   disabled
tunefs: MAC multilabel: (-l)                               disabled
tunefs: soft updates: (-n)                                 enabled
tunefs: soft update journaling: (-j)                       enabled
tunefs: gjournal: (-J)                                     disabled
tunefs: trim: (-t)                                         enabled
tunefs: maximum blocks per file in a cylinder group: (-e)  4096
tunefs: average file size: (-f)                            16384
tunefs: average number of files in a directory: (-s)       64
tunefs: minimum percentage of free space: (-m)             8%
tunefs: space to hold for metadata blocks: (-k)            6408
tunefs: optimization preference: (-o)                      time
tunefs: volume label: (-L)

This can also be run before reboot to verify that TRIM is not enabled.

IMPORTANT: Enabling TRIM may cause complete filesystem failure and destroy an installation on some SSDs.

FreeRADIUS

https://doc.pfsense.org/index.php/FreeRADIUS_2.x_package

External links

pfSense home page

pfSense forums post explaining how to enable trim support.