It's pfSense with a few rough edges
pfSense is great, so I'm happy that there is a way to use it in AWS. A few notes:
- The throughput issues can be fixed by going to System->Advanced->System Tunables and changing net.inet.tcp.tso to 0 instead of 1 (default). There's an issue with the xen network driver on FreeBSD that necessitates this. After that, the speed is great. They shouldn't make end users figure this out.
- The in-place upgrades have been disabled, so applying security updates means spinning up a new instance based on an updated ami from netgate, and then exporting and reloading a config. I've not yet experienced the time it takes for Netgate to publish new AMI's after pfSense updates, so this may or may not be an issue.
- I found the documentation to be lacking for my particular setup. Given this is a subscription based AMI, I'd like for there to be better support options.
Otherwise, it's the same great pfSense we all know and love.