2 port NIC recommendation for old SuperMicro X7SPA-HF-D525

Hopefully I am jamming this question in the right place.
Looking for two port intel NIC card for pfSense install for home network
The X7SPA-HF-D525 is so old its hardware is limited with a single physical PCIe x16 slot, wired at only PCIe 2.0 x4 bandwidth. The motherboard runs an ancient embedded Intel Atom D525 processor (released around 2010), and it will be limited to 1 Gbps and the CPU cannot push enough processing power to handle modern 2.5 Gbps or 10 Gbps speeds.

Do you guys think the 82575 / 82576 will be ok or should I go with i350T2?
Is this 10Gtek card ok or would a i350-T2 be better? Both are around the same price.
I am concerned about picking up a counterfeit NIC.

the first one would prob be fine.

I don't see why you'd need anything more than the first card. First one has 4 queues, your processor has 4 threads, that's a good match.

Personally, I'd grab something like this

https://www.ebay.com/itm/376850536594?

it's half the price and double the ports, but it is a bypass nic, and you'll have to hunt for the drivers and fiddle around, but you can put it into 'normal nic' mode once and then it'll be a quad nic until you tell it otherwise. You want the -SD models if possible, they use pci ids that regular intel drivers will attach to.

Could go 10g for a little more https://www.ebay.com/itm/327398203941 (same caveat about bypass nics), there's also some cheap silicom cards where the ports are on the inside which I dunno, could be acceptable if the price is right.

Your CPU might well be too anemic to push 10g, but if your network is 10g, you'd get a measurable, but meaningless latency benefit, until you ran out of cpu

Since you're running pfSense, I assume it's gonna be a firewall, and afaik, segmentation offloading and firewalls don't mix, but maybe there's a way... Offloading would be handy for your tiny cpu use case, if it was available... Less packets, but bigger would reduce the amount of time spent on forwarding decisions, which should boost throughput... But again, afaik, firewalls don't tend to work with offloading, sadly.