OPNsense Forum
English Forums => Zenarmor (Sensei) => Topic started by: beki on February 02, 2023, 04:29:53 pm
-
Hi all,
For several weeks, some Suricata and Zenarmor users have been experiencing packet stalls with VLAN/LAGG interface due to netmap bugs.
To solve these issues and introduce netmap enhancements to FreeBSD, Zenarmor, and OPNsense teams have collaborated with Klara Systems. Some of the developments have already been included in the FreeBSD 14 development branch.
To ship enhancements to OPNsense, last week, the OPNsense team shipped a test kernel.
You may easily install the test kernel:
# opnsense-update -zkr 23.1-netmap
# opnsense-shell reboot
We’ve also run some tests on our side and with some of Zenarmor users. So far so good. The "results" (or rather their absence) seem promising. There are no crashes, no regressions, and no reliability issues.
Thank you to the developers who are contributing to the project and putting in significant work. However, they need community cooperation now to test and spot and address any remaining issues.
The more tests we can do, the higher chance to catch any missing bugs and solve all issues.
Therefore, any help will be greatly appreciated. Please, join the tests and give feedback.
https://forum.opnsense.org/index.php?topic=32114.0
https://forum.opnsense.org/index.php?topic=32185.0
Best
-
I believe the issues with Netmap extend beyond VLAN/LAGG issues. I've had kernel panics on my implementation ever since installing Zenarmor. I'll implement this patch to see if it helps.
-
Hi @jbhorner,
Did you try the test kernel?
https://forum.opnsense.org/index.php?topic=32114.30