this happens when you mess with the intells 10gig ix interfaces,
when pfsense runs next release the kernell also changes as BSD next month does, Tom you did a pre-release on freenas video, as nfs and some other issues are depricated the only vlan used is the 802.1q
the explicit guidelines against the vlan tag is that the vlan mtu is set to 1524, these 24 needs on the mask been expanded so the stp multicast has a long range above this tou need to manualy modify the ethernet arp by placing the tag inside the parent so the bit off the id eg 4000 , where 4 is 2power2 so this is set 11then all 00 00 00 see this as in hex due vlan is set by 1024 2048 "4096 "
so every memory range is now placed on the ip protocol , in an ethernet ii domain the tags goes in on interface , that only filters ingress , once out the local domain the protocol becomes IP, hence as outgoing tcp to any public by way tcp works is connected, when your lan goes out to wan the source is set on the wan and your lan is between the handshake, when you don’t match exact the overlay the connect will be open in days webservers only responded on a client no issue, today, in the request header the host says:the site you connect on, browser drops all tls traffic as iscsii is used on a storage the system works exact as i made my first SAS raid with a simple DAC cable not for 10gig but for all sas drives running on 6gb/s, the vlan switch had then 2 servers with an raid controller to monitor the flow these ran 1gig vlan for data rpm , bsd delivers many vendors and also lsi,megaraid,broadcom,
i made this cluster in 2008 with ibm, a tagged port is not trunk it makes the igmp vlan id possible to push all noise out the data flow, below you see intells SoC which is ment for every pci lane to be processed by the core so 4 cores make four 10gig interfaces being processed on the cpu instead the network interface, and pfsense runs on the bsd kernell so when you use a intell Soc on a netgate the system breaks as shown below by warnings in the boot proceess, which breaks physicall one core so i think this is a problem, i filed by my support team that verified the problem, the tryout on a homekab is risky cause it physicall breaks (on mine xd 7100 u the ds 5100 may react different but all in a lagg0
will break,so i have now huge problem 
ST 2020
root@buildbot2-nyi.netgate.com:/build/factory-crossbuild-245/obj/amd64/OwEBqLPQ/build/factory-crossbuild-245/sources/FreeBSD-src/sys/pfSense
amd64
FreeBSD clang version 8.0.1 (tags/RELEASE_801/final 366581) (based on
LLVM 8.0.1)
VT(vga): resolution 640x480
CPU: Intel(R) Atom™ CPU C3558 @ 2.20GHz (2200.07-MHz K8-class CPU)
Origin=“GenuineIntel” Id=0x506f1 Family=0x6 Model=0x5f Stepping=1
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x4ff8ebbf<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,RDRAND>
AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
AMD Features2=0x101<LAHF,Prefetch>
Structured Extended
Features=0x2294e283<FSGSBASE,TSCADJ,SMEP,ERMS,NFPUSG,MPX,PQE,RDSEED,SMAP,CLFLUSHOPT,PROCTRACE,SHA>
Structured Extended Features3=0x2c000000<IBPB,STIBP,ARCH_CAP>
XSAVE Features=0xf<XSAVEOPT,XSAVEC,XINUSE,XSAVES>
IA32_ARCH_CAPS=0x1<RDCL_NO>
VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr
TSC: P-state invariant, performance statistics
real memory = 10737418240 (10240 MB)
avail memory = 8203603968 (7823 MB)
Event timer “LAPIC” quality 600
ACPI APIC Table:
WARNING: L1 data cache covers less APIC IDs than a core
0 < 1
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 4 core(s)
ioapic0: Changing APIC ID to 2
ioapic0 <Version 2.0> irqs 0-23 on motherboard
SMP: AP CPU #1 Launched!
ipw_bss: You need to read the LICENSE file in
/usr/share/doc/legal/intel_ipw.LICipw_bss: If you agree with the
license, set legal.intel_ipw.license_ack=1 in /boipw_ibss: You need to
read the LICENSE file in /usr/share/doc/legal/intel_ipw.LIipw_ibss: If
you agree with the license, set legal.intel_ipw.license_ack=1 in
/bipw_monitor: You need to read the LICENSE file in
/usr/share/doc/legal/intel_ipwipw_monitor: If you agree with the
license, set legal.intel_ipw.license_ack=1 iniwi_bss: You need to read
the LICENSE file in /usr/share/doc/legal/intel_iwi.LICiwi_bss: If you
agree with the license, set legal.intel_iwi.license_ack=1 in
/boiwi_ibss: You need to read the LICENSE file in
/usr/share/doc/legal/intel_iwi.LIiwi_ibss: If you agree with the
license, set legal.intel_iwi.license_ack=1 in /biwi_monitor: You need
to read the LICENSE file in /usr/share/doc/legal/intel_iwiiwi_monitor:
If you agree with the license, set legal.intel_iwi.license_ack=1
inpcib2: mem 0xdfe00000-0xdfe1ffff irq 20 at
device 14.0 on pcib3: mem 0xdfe20000-0xdfe3ffff
irq 22 at device 16.0 on pcib4: mem
0xdfe40000-0xdfe5ffff irq 23 at device 17.0 on ahci0: port 0x1c20-0x1c27,0x1c28-0x1c2b,0x1c00-0x1c1f
mem 0xdfe74000-0xdfe75fff,0xdfe7c000-0xdfe7c0ff,0xdfe7a000-0xdfe7a7xhci0:
<Intel Denverton USB 3.0 controller> mem 0xdfe60000-0xdfe6ffff irq 19
at ix0: <Intel(R) PRO/10GbE PCI-Express Network Driver, Version -
3.2.12-k> mem 0xdix1: <Intel(R) PRO/10GbE PCI-Express Network Driver,
Version - 3.2.12-k> mem 0xdix2: <Intel(R) PRO/10GbE PCI-Express
Network Driver, Version - 3.2.12-k> mem 0xde1000phy0: none, 10baseT,
10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 100e1000phy1: none,
10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT,
100e1000phy2: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX,
1000baseT, 100e1000phy3: none, 10baseT, 10baseT-FDX, 100baseTX,
100baseTX-FDX, 1000baseT, 100e1000phy4: none, 10baseT, 10baseT-FDX,
100baseTX, 100baseTX-FDX, 1000baseT, 100e1000phy5: none, 10baseT,
10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 100e1000phy6: none,
10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT,
100e1000phy7: none, 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX,
1000baseT, 100ix3: <Intel(R) PRO/10GbE PCI-Express Network Driver,
Version - 3.2.12-k> mem 0xdsdhci_pci0: <Intel Denverton eMMC 5.0
Controller> mem 0xdfe77000-0xdfe77fff,0xdfuart0: port 0x3f8-0x3ff irq 19 flagsuart1:
port 0x2f8-0x2ff irq 18 on
acmmcsd0: 31GB <MMCHC M52532 0.1 SN 08DF1CBC MFG 08/2018 by 112
0x0000> at mmc0 50Enter full pathname of shell or RETURN for /bin/sh:
uhub0: 8 ports with 8 remova# h: 5: not foundnit: can’t exec 5 for
single user: No such file or directory