So, after a short stint on Untangle, I am back on pfsense. So, now, for the fun of it I want to poke and tweak it. I have been using it for the most part for the last five or six years.
The machine is overkill to start. An older E3 quad core Xeon, 4 GB of RAM, and a 10GB Intel X520 NIC for the LAN side. So, not really anything hardware to tweak.
What I have done so far is set the DNS forward to Cloudflare since I get really good ping times to them, 2-3ms. Internally, I am using the built in DNS resolver and have prefetch turned on for the cached entries. If my understanding is right, this will fetch updated DNS entries for anything in the cache and keep it up to date for internal use on the LAN. I also set the size of the cache to 512MB. Probably way more than I need, but you can not have too much cache.
So, what else can be done to tweak and squeeze every ounce out of pfsense? I pretty much get my ISP symmetric 1Gb/s already, so throughput is not really an issue. It is more about finding responsiveness of the network. I know the outside world is out of my control and that the gains are going to be minimal. I am just playing with this for my own amusement. Nothing more.
So, anything aside from QoS and traffic shaping that can be done? Or have I pretty much tweaked things as much as can be? I do have pfblocker running as well, so DNSBL obviously has a bit of impact on things. But, not sure I can do much about that.