OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: aeq on November 05, 2022, 08:27:53 am

Title: Since update to 1.12 packet loss on all interfaces
Post by: aeq on November 05, 2022, 08:27:53 am

Hi, after the update to 1.12 and opnsense 22.7.7 I get about 25% packetlos on all interfaces in Zenarmor.
If I disable the engine ping is clear. If I enable Zenarmor engine again ping is clear for about 2-3 minutes after the packetloss is coming back again...
I am now running with diabled zenarmor...
Does anyone have the same problem?

Title: Re: Since update to 1.12 packet loss on all interfaces
Post by: athurdent on November 05, 2022, 08:32:09 am

Nope, all fine here.

Title: Re: Since update to 1.12 packet loss on all interfaces
Post by: aeq on November 06, 2022, 09:14:09 am

Found out that the issue seems to be the "Cloud Reputation & Web Categorization"
If I disable it all is fine... but also no filtering... :/

And if I try to make some new blacklists entries I got this:
"Configuration Saved Notification.Rules could not be loaded. Please try again"

Is it mandatory to enable the "Cloud Reputation & Web Categorization" to have the policy working? Even if you have manuel entries?

Title: Re: Since update to 1.12 packet loss on all interfaces
Post by: aduwing on November 06, 2022, 01:53:41 pm

Quote from: aeq on November 05, 2022, 08:27:53 am

Hi, after the update to 1.12 and opnsense 22.7.7 I get about 25% packetlos on all interfaces in Zenarmor.
If I disable the engine ping is clear. If I enable Zenarmor engine again ping is clear for about 2-3 minutes after the packetloss is coming back again...
I am now running with diabled zenarmor...
Does anyone have the same problem?

I am experiencing the same issue with this version. I tried reinstalling with the same result. For now, I uninstalled it.

Title: Re: Since update to 1.12 packet loss on all interfaces
Post by: aeq on November 06, 2022, 02:54:28 pm

Ok, I already reported that issue to Sunnyvalley support...maybe we got an update next days

Title: Re: Since update to 1.12 packet loss on all interfaces
Post by: aeq on November 06, 2022, 05:33:03 pm

U̵p̵l̵o̵a̵d̵ ̵s̵p̵e̵e̵d̵ ̵i̵s̵ ̵a̵l̵s̵o̵ ̵v̵e̵r̵y̵ ̵l̵o̵w̵ ̵w̵i̵t̵h̵ ̵t̵h̵i̵s̵ ̵e̵n̵a̵b̵l̵e̵d̵ ̵"̵w̵o̵r̵k̵a̵r̵o̵u̵n̵d̵"̵ ̵ ̵2̵3̵9̵k̵b̵i̵t̵ ̵i̵n̵s̵t̵e̵a̵d̵ ̵o̵f̵ ̵5̵0̵M̵b̵i̵t̵

Seems to be an issue with the native netmap driver... with emulated is seems to work again

Title: Re: Since update to 1.12 packet loss on all interfaces
Post by: aeq on November 07, 2022, 05:51:23 pm

Sunnyvalley Support answered:

Quote

Please try to add the following tunable and then restart the firewall.
 
System - Settings - Tunable
Tunable: dev.netmap.buf_num
Value: 1000000

This was working for me!!! ;D ;D ;D