Messages

Coming back to the N100, that one core is now mostly in the 50s, rarely in the 60s, at 110 MB/s download.

And with a T-Bao N9N Eastpect at one core stays below 60%, at 110 MB/s download.

And at about 100 MB/s it is usually in the 50s, sometimes in the lower 60s.

Yup, at 113 MB/s downloads from Usenet, one core of my N100 is used by Eastpect maximally 75% (usually in the 60s, sometimes in the 50s, using Debian, it can be very similar for OPNsense).

That's 904 Mbps effective speed (using yenc and TLS 1.3 connections).

I do have Zenarmor working with Elasticsearch 8.12.2. However, not on OPNsense, but on Debian 12.

I have a N100 router. It does Gigabit Zenarmor without problem. On OPNsense, it's out of the box, on Debian you have to install tlp in order to get Gigabit Zenarmor.

For most users multithreaded easpect would mean close to 4 times lower CPU specs needed, which would allow them to use a lot of older hardware. And thus be more willing to pay for a Zenarmor license.

It's usually the bill for the electrical power which scares them, not the price of the device. Since it's very hard to find high-specs devices, for a normal price, which don't use a lot of power. I'm lucky that I bought my Venus series for less than 200 Euro per piece. Now their prices are getting crazy, that is if you can buy them at all.

If you only want to use something perfect: DNS is by default not perfect, so you should not use it.

What can they find about me through DNS calls? That I use Wikipedia and that I'm an Usenet leecher. Usenet leeching is not prosecuted in my country.

Quad9 is run by a cooperation of several national Police organizations. So, they are not enemies of the FBI.

And if the Police wants to know what I do with my computers/mobile phones, they are legally allowed to intercept my traffic and hack my devices.

Anyway: for the law-abiding citizens, Police is their friend, not their enemy.

I have DoT to Quad9. Not a commercial organization. Logs are kept for 24 hours, only to prevent abuse.

I trust that Quad9 operators know what they do. And that is above my pay grade.

See https://forum.opnsense.org/index.php?topic=38557.0

Why use DNScrypt? Unbound does DoT (yup, it works with dns.opendns.com also).

These tunables:

performance_cx_lowest=Cmax
economy_cx_lowest=Cmax

gave me a 5 degrees Celsius reduction in CPU temperature.

Yup, I also see in logs stuff as:

Code Select Expand


./audit/audit_20240203.log:<35>1 2024-02-03T01:01:04+00:00 OPNsense.home.arpa configd.py 678 - [meta sequenceId="386"] action sensei.update-install.os-sensei-db not found for user root


Meaning Zenarmor is not a firewall. OPNsense is. Or you could use Debian or Ubuntu instead of OPNsense, still using Zenarmor.