When copying a file to my TrueNAS system, Opensense 23.7.4 drops internet and LAN connectivity and I can't reach the firewall at all except on an isolated connection I have set up for admin. Rebooting solves the problem as long as I don't try and copy a file to the NAS. The NAS is on a 10G fiber connection own it's own subnet, and the machine trying to the copy is on the LAN subnet and has a 10G connection as well. The file I'm trying to copy is 800mb, and reaches about 75% before it hangs and causes this issue. I can stream movies from the NAS just fine on the LAN.
I've looked around in Opensense at all logs I can find and see no indication of a problem, as well as in TrueNAS. I know it's a long-shot without any data, but I'm stumped. Any clues or tips much appreciated!
Well, this is a somewhat interesting. It only happens when I copy a file of more than 800MB in size.
Is OPNsense virtualized on this TrueNas system or any other? I could see potential issues there, if so.
This is on dedicated hardware.
I've enabled "Use PowerD" in "adaptive" mode, and so far so good!
Quote from: Whayle on September 27, 2023, 02:28:42 PM
This is on dedicated hardware.
I've enabled "Use PowerD" in "adaptive" mode, and so far so good!
That would allow the CPU to clock down, not sure why you do that given your issues. What kind of hardware is this on?
Thanks,
It looks like that wasn't actually helpful.
It seems to point to a Multicast issue, caused by a Mikrotek switch. Disabling "Flood Unknown Multicast" except on the ingress port, and turning off "Mikrotik Discovery Protocol" seems to have solved the problem. I'll know for sure by the end of today.
Still no luck on this... Copying a large file locks up the firewall. I'm looking into a potential problem with SMB as everything else seems to work great. I was previously able to copy large files to the NAS before I started using Opensense and a new NIC.
Can you post a network diagram?
From what you've said it seems like you have your client and the NAS on completely separate interfaces which causes the traffic to go through OPNSense.
Is there a reason to have this setup instead of having the client and NAS on the same interface so you're not forcing OPNSense to route at 10g?
oh snap, one client had jumbo frames enabled among other things. After a driver reset all is well.