OPNsense Forum
Archive => 19.1 Legacy Series => Topic started by: tillsense on November 04, 2018, 10:50:43 am
-
First Look.. :)
Update 28.11.18 -> 5.2-10 to 5.2-3 (5.2-10 was the manager)
-
So far so good, thanks! 8)
-
First Look.. :)
Does IPS/IDS work with the virtio drivers?
-
IPS / IDS is not my first look :o
-
yeah it runs great on proxmox, I have tested it on proxmox at almost 950mbit throughput, ran perfectly.
-
Did you passthrough to your NICs or did you get those results using the Virtio network drivers? I'm curious as I currently have a Proxmox box I'm not getting much use out of that I would like to run OPNsense on.
-
virtio drivers. It works way better than esxi which surprised me.
I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.
Note this is over NAT as well. As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.
-
virtio drivers. It works way better than esxi which surprised me.
I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.
Note this is over NAT as well. As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.
Thanks, I would love to see that.
-
Nope IPS / IDS did not work. Complete Networktraffic frozen when used with virtio driver. without IPS / IDS and virtio opnsense runs fast.
-
here is the screenshot I apologise tho this was when it was still on 18.7 not 19.1, but it is proxmox using virtio.
PTI is disabled.
-
Hi,
yes i can confirm that with virtio the opnsense works fine and fast as Long as you have disabled IPS/IDS.
That was the big Question. "Does IPS/IDS work with the virtio drivers?" and here i can say opnsense do not work with this Options on.
-
Hi second look,
flowd not work anymore (19.1.r1):
(suricata with iommu card ok)
kernel: [HBSD SEGVGUARD] [python2.7 (61604)] Suspension expired.
kernel: -> pid: 61604 ppid: 52950 p_pax: 0xa50<SEGVGUARD,ASLR,NOSHLIBRANDOM,NODISALLOWMAP32BIT>
cheers till
-
Yup, on it, see https://forum.opnsense.org/index.php?topic=11237.0
-
Hi Franco,
ok regardless of the proxmox test. very nice. your fix looks good here as well.
cheers till
Update:
opnsense: 19.1.r1 + Fix https://github.com/opnsense/ports/commit/ebb9fee7627a
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)
-
Super, thanks for the feedback Till 8)
-
Hi,
a new vm installation with the final 19.1 iso works straight away. a big thank you to the whole opnsense team!
cheers till
Update:
opnsense: 19.1
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)