OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: rafaelbs on October 19, 2025, 05:55:40 AM

Title: Enable RSS on Tunables - not working
Post by: rafaelbs on October 19, 2025, 05:55:40 AM
Hi,

I'm trying to improve my IPS performance (LAN only). Problem appears when I activate IPS: cpu ok (less than 10%), but a lot of network users can't use internet, and bandwidth decreases a lot.

After a lot of reading on forum and docs, I decided to follow the instructions on this article: https://docs.opnsense.org/troubleshooting/performance.html

After reboot, I realized that net.inet.rss.enabled is still 0.

If I'm not wrong, this is the key to allow more queues on NIC (100Gb).

I also have tried to increase the number of threads of Suricata, without success. Runmode is as Workers, and Threads (on netmap) auto. Changed threads to 16, but did not take any effect. It only starts with 2 threads.

<Notice> -- Threads created -> W: 2 FM: 1 FR: 1   Engine started.
Running last update of OPN (OPNsense 25.7.5-amd64).

Appreciate any help.

Regards.
Rafael