OPNsense Forum

Archive => 19.1 Legacy Series => Topic started by: tillsense on November 04, 2018, 10:50:43 am

Title: Installer successful on Proxmox
Post by: tillsense on November 04, 2018, 10:50:43 am
First Look.. :)




Update 28.11.18 -> 5.2-10 to 5.2-3 (5.2-10 was the manager)
Title: Re: Installer successful on Proxmox VE 5.2-10
Post by: franco on November 04, 2018, 07:04:45 pm
So far so good, thanks!  8)
Title: Re: Installer successful on Proxmox VE 5.2-10
Post by: Mundan101 on November 12, 2018, 12:43:25 pm
First Look.. :)

Does IPS/IDS work with the virtio drivers?
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: tillsense on November 28, 2018, 08:43:00 pm
IPS / IDS is not my first look  :o
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: chrcoluk on December 13, 2018, 01:29:33 am
yeah it runs great on proxmox, I have tested it on proxmox at almost 950mbit throughput, ran perfectly.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: tibere86 on December 13, 2018, 06:38:04 pm
Did you passthrough to your NICs or did you get those results using the Virtio network drivers? I'm curious as I currently have a Proxmox box I'm not getting much use out of that I would like to run OPNsense on.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: chrcoluk on December 14, 2018, 09:21:37 pm
virtio drivers.  It works way better than esxi which surprised me.

I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.

Note this is over NAT as well.  As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: tibere86 on December 15, 2018, 03:58:15 am
virtio drivers.  It works way better than esxi which surprised me.

I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.

Note this is over NAT as well.  As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.
Thanks, I would love to see that.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: lewald on December 15, 2018, 01:12:39 pm
Nope IPS / IDS did not work. Complete Networktraffic frozen when used with virtio driver. without IPS / IDS and virtio opnsense runs fast.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: chrcoluk on December 18, 2018, 10:31:49 am
here is the screenshot I apologise tho this was when it was still on 18.7 not 19.1, but it is proxmox using virtio.

PTI is disabled.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: lewald on December 18, 2018, 03:03:55 pm
Hi,

yes i can confirm that with virtio the opnsense works fine and fast as Long as you have disabled  IPS/IDS.

That was the big Question. "Does IPS/IDS work with the virtio drivers?" and here i can say opnsense do not work with this Options on.
Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: tillsense on January 21, 2019, 09:05:13 pm
Hi second look,
flowd not work anymore (19.1.r1):
(suricata with iommu card ok)

Code: [Select]
kernel: [HBSD SEGVGUARD] [python2.7 (61604)] Suspension expired.
kernel: -> pid: 61604 ppid: 52950 p_pax: 0xa50<SEGVGUARD,ASLR,NOSHLIBRANDOM,NODISALLOWMAP32BIT>

cheers till

Title: Re: Installer successful on Proxmox VE 5.2-3
Post by: franco on January 21, 2019, 09:15:05 pm
Yup, on it, see https://forum.opnsense.org/index.php?topic=11237.0
Title: Re: Installer successful on Proxmox
Post by: tillsense on January 22, 2019, 07:41:58 pm
Hi Franco,
ok regardless of the proxmox test. very nice. your fix looks good here as well.

cheers till

Update:
opnsense: 19.1.r1 + Fix https://github.com/opnsense/ports/commit/ebb9fee7627a
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)
Title: Re: Installer successful on Proxmox
Post by: franco on January 22, 2019, 08:54:56 pm
Super, thanks for the feedback Till  8)
Title: Re: Installer successful on Proxmox
Post by: tillsense on February 02, 2019, 10:14:24 pm
Hi,
a new vm installation with the final 19.1 iso works straight away. a big thank you to the whole opnsense team!

cheers till


Update:
opnsense: 19.1
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)