great-potential

Yeah a bit overkill my threat model just encompass ISP/GAFAM not three letter agencies :D

Well if you can bribe some people in the middle that does not count hence the Panama based ISPs

So a VPN provieder has to check with the laws of all the countries in the world to be able to function ? does'nt make sense you cant create logs if you don't log anything ..

I deleted my proton account about a year ago when I saw that I could not login from tor anymore, kudos to tutanota for allowing to register/login without a cell phone it must be really challenging !

Exactly, I dont see the point bragging about this nevertheless posting about it on HN ...

I mean this is just basic stuff, for me it just sounds like a developer putting a site in production, no auto-scaling, patching ... might as well outsource this to a CDN since there is no database/redis/varnish ...

Dont mean to be the negative Joe but you dont need a webserver if you're serving a static-able website.

Great news! tbh I just assumed from past exprience with Intel NICs that it will negotiate to lower speed without FEC.

Personnaly I'll probably go with some cheap mellanox card on ebay :)

In terms of CPU it is not totally overkill if you're using an IPS/IDS, bare in mind you'll also be disabling most of the network card offloading in a full fledged firewall and that will ultimately result in consuming slightly more CPU cycles.

Not sure why you buy at fs.com when you have online stores in CH that are selling much cheaper:

https://www.microspot.ch/de/computer-gaming/pc-komponenten/s...

Yeah running your nas-bittorrent/firewall-router on the same OS is clearly not something I would do, especially that now you can use somrthing like proxmox for example and virtualize your pfsense/opnsense instance.

Yes the transceivers recommended by Init7 (bidi-LR) do not support FEC and you'll be running in degraded mode (according to the controller datasheet), and I don't think this is something that can be achieved by coding of the transceivers.

Well, hate to tell you but you'll be limited 10Gb/s with these Intel cards because they require FEC.

I think if the OP uses this only as a router it is indeed a waste of power.

What I would probably do is also use it as nas/workstation by using virtualization, SR-IOV is now pretty standard on these cards.