OPNsense Forum

Archive => 18.1 Legacy Series => Topic started by: guest17399 on March 14, 2018, 10:31:43 pm

Title: Performance issues.
Post by: guest17399 on March 14, 2018, 10:31:43 pm

There will be two cars in the cluster. If I'm not mistaken, then the cluster can be made with the means of opensense - that is, reservation, in case one machine fails.

In total there will be 2 completely identical machines.

The configuration of one of the machines:
HP DL360 G6
Xeon x5690 x2
I350-T4
4 + 4Gb RAM
72Gb HDD SAS (DG072A8B54) - HW Raid 1
2 PSU

What will happen:

Opensense Latest
Reservation machine.
100MBps traffic to the world.
1GBps traffic on the local network.
Suricata + signatures from Snort.
BGP Community.
NAT.

What can you expect from such a machine?
How feasible are the tasks?
Will there be problems with the disk subsystem?

Title: Re: Performance issues.
Post by: mimugmail on March 15, 2018, 05:37:08 am

Should not bei an issue. Perhaps a decrease of Suricata, but the rest is fine

Title: Re: Performance issues.
Post by: guest17399 on March 15, 2018, 09:46:44 am

I'm mostly afraid only that there may not be enough disk subsystem performance. And the HDD (SAS) needs SSD.

Title: Re: Performance issues.
Post by: mimugmail on March 15, 2018, 04:06:35 pm

Without Proxy you dont need much disk speed

Title: Re: Performance issues.
Post by: guest17399 on March 19, 2018, 09:10:30 pm

And how voluminous logs write?
When attacking, for example.

I'm afraid that the disk space may not be enough

Title: Re: Performance issues.
Post by: mimugmail on March 19, 2018, 10:13:56 pm

72GB? Most files are clog's .. so they have a fixed size and older entries are deleted.

Title: Re: Performance issues.
Post by: guest17399 on March 20, 2018, 06:59:21 am

Quote

72GB?

~68

Title: Re: Performance issues.
Post by: dcol on March 20, 2018, 10:21:46 pm

You should be fine with the disk. I run 2 OPNsense boxes with 60GB SSD's and stay under 10% on disk usage. Just don't use the swapfile option during install. Be careful using too many snort rules in IDS as they can eat memory.