First Look.. :)
Update 28.11.18 -> 5.2-10 to 5.2-3 (5.2-10 was the manager)
So far so good, thanks! 8)
Quote from: tillsense on November 04, 2018, 10:50:43 AM
First Look.. :)
Does IPS/IDS work with the virtio drivers?
IPS / IDS is not my first look :o
yeah it runs great on proxmox, I have tested it on proxmox at almost 950mbit throughput, ran perfectly.
Did you passthrough to your NICs or did you get those results using the Virtio network drivers? I'm curious as I currently have a Proxmox box I'm not getting much use out of that I would like to run OPNsense on.
virtio drivers. It works way better than esxi which surprised me.
I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.
Note this is over NAT as well. As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.
Quote from: chrcoluk on December 14, 2018, 09:21:37 PM
virtio drivers. It works way better than esxi which surprised me.
I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.
Note this is over NAT as well. As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.
Thanks, I would love to see that.
Nope IPS / IDS did not work. Complete Networktraffic frozen when used with virtio driver. without IPS / IDS and virtio opnsense runs fast.
here is the screenshot I apologise tho this was when it was still on 18.7 not 19.1, but it is proxmox using virtio.
PTI is disabled.
Hi,
yes i can confirm that with virtio the opnsense works fine and fast as Long as you have disabled IPS/IDS.
That was the big Question. "Does IPS/IDS work with the virtio drivers?" and here i can say opnsense do not work with this Options on.
Hi second look,
flowd not work anymore (19.1.r1):
(suricata with iommu card ok)
kernel: [HBSD SEGVGUARD] [python2.7 (61604)] Suspension expired.
kernel: -> pid: 61604 ppid: 52950 p_pax: 0xa50<SEGVGUARD,ASLR,NOSHLIBRANDOM,NODISALLOWMAP32BIT>
cheers till
Yup, on it, see https://forum.opnsense.org/index.php?topic=11237.0
Hi Franco,
ok regardless of the proxmox test. very nice. your fix looks good here as well.
cheers till
Update:
opnsense: 19.1.r1 + Fix https://github.com/opnsense/ports/commit/ebb9fee7627a
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)
Super, thanks for the feedback Till 8)
Hi,
a new vm installation with the final 19.1 iso works straight away. a big thank you to the whole opnsense team!
cheers till
Update:
opnsense: 19.1
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)