Depending on the SoC, C3000s have 0, 2 or 4 on-die MACs that will do 10Gbps. Also depending on the Doc, C3000s have no QAT or one that will run at "low", "mediu

Depending on the SoC, C3000s have 0, 2 or 4 on-die MACs that will do 10Gbps. Also depending on the Doc, C3000s have no QAT or one that will run at "low", "medium" or "high" speed. The difference is in the number of "engines" that can be in-use. https://ark.intel.com/compare/97935,97928,97930,97929,97937,97934,97938,97926,97939,97932,97936,97931,97940,97933,97927 https://ark.intel.com/compare/97935,97928,97930,97929,97937,... Support for the C3000 NICs is included in pfSense 2.4.4. Support for the C3000 QAT will come later. I can say that we've tested to > 800Gbps on a C3550 using AES-GCM-128 between a pair of the C3558-based systems we sell. This is using AES-NI, not QAT.