Gobo

From a networking standpoint, you can configure qos tagging for a specific application and use that dscp variable as a flag for pbr. Then set your next hop via respective tunnel.

Yea. This is what spanning tree and bpduguard is for. Don’t disable them on your edge.

I was about to say. Wp5 on dos 5.0 with the blue screen.

Setup nginx as a v6 to v4 reverse proxy. Or the inverse if you have a public v4 in a vpc to use as a dmz.

I was looking for this

Pfsense has an openvpn server and client built in. Also if you are using site-to-site ipsec vpns it can be useful. I think it will also use the extensions if you run a web proxy to inspect tls traffic. If you just use it for a nat gateway, then you don’t need aes-ni or even most of the features Pfsense provides.

Have you looked into bulk rename utility?

https://www.bulkrenameutility.co.uk/

It’s github. Submit a PR