Hi everyone,
I was recently thinking about drive storage and how it is used in OPNsense, how often the drives should be changed and how much data OPNsense writes to it which I don't have a clear answer on. What comes with this topic is drive storage failures and my question is how do you guys handle that part of the firewall?
What's your philosophy or approach to drives used in OPNsense? Do you monitor drives for failures, if so, how and if not, how do you make sure that the failure of the drive doesn't cause any issues or opens up the firewall on the WAN side upon the failure?
Let's discuss about this topic and everything that comes with it.
Thanks
Quote from: BigFreddy on Today at 11:51:24 AMDo you monitor drives for failures, if so, how
I use Scrutiny - and I am a bit disappointed I got zero feedback for my detailed instructions which I wrote up here:
https://forum.opnsense.org/index.php?topic=48101.msg242617#msg242617
I'd recommend to do something like this for every installation. Similar to watching temperatures e.g. via SNMP.
Quote from: BigFreddy on Today at 11:51:24 AMhow do you make sure that the failure of the drive doesn't cause any issues or opens up the firewall on the WAN side upon the failure?
That scenario is so unlikely I would call it impossible. The firewall rules are loaded into the kernel. The default rule without any rule present is "deny all". So with all user processes crashing but the kernel just continuing to forward packets, your policy does not change. And should the firewall reboot but not be able to configure itself because it cannot read the configuration from the drive, all doors are shut.