Messages

1

General Discussion / Re: Openvpn - gigabit not works

« on: August 23, 2020, 08:41:32 am »

I have this hardware
https://pt.aliexpress.com/item/32813348470.html?spm=a2g0s.9042311.0.0.581bb90a17te5z

CPU: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz (4 cores)

2

General Discussion / Openvpn - gigabit not works

« on: July 25, 2020, 06:00:16 pm »

I have an opnsense firewall to isolate a network.
To connect on the isolate network, I connect to openvpn 'opnsense'.

PC <> switch1 <> opnsense <> switch2 <> server

Opnsense have 2 interfaces,
interface1: to connect on switch1
interface2: to connect on switch2

I did the speed test with iperf, on 'PC' to 'opnsense' (interface1), and 'server' to 'opnsense' (interface2), and the gigabit network works.

For the PC connect on interface2, I need to use openvpn.
But, the iperf test between 'PC' (with openvpn) and 'opnsense' (interface2), or 'PC' to 'server', connection speed work with 100mbps.

My entire network is gigabit.

3

17.7 Legacy Series / Re: Resolve DNS by VPN

« on: August 30, 2017, 09:54:13 pm »

How do I make dnsmasq add the "dnsmasq-hosts" of all servers?

Code: [Select]

root@OPNSENSE-VM:/usr/local/opnsense # ps aux | grep dnsmasq
nobody          30001   0.0  0.2 1081472  4680  -  I    Mon01       0:14.34 /usr/local/sbin/dnsmasq --all-servers --rebind-localhost-ok --stop-dns-rebind -H /var/etc/dnsmasq-hosts ........

How do I put multiple "dnsmasq-hosts"?
Share on nfs

ex:

Code: [Select]

dnsmasq -H /var/etc/dnsmasq-hosts;172.16.10.1:/var/etc/dnsmasq-hosts 

4

17.7 Legacy Series / Re: Resolve DNS by VPN

« on: August 28, 2017, 07:11:30 pm »

Getting added manually is not a very practical task.

To put multiple DNS in dhcp, also not very practical.

How to synchronize two DNS?

It is possible?

Or how do I do to the network 172.17.0.1 DNS, automatically add the network DHCP 172.16.10.1

5

17.7 Legacy Series / Re: Resolve DNS by VPN

« on: August 28, 2017, 04:26:18 pm »

How do I do this?
I'll leave opnsense 172.16.0.1 as central dns.

How do I configure 172.16.10.1

I've enabled the option.

In the first field I put "service.local"
In the second field "172.16.0.1"

6

17.7 Legacy Series / Re: Resolve DNS by VPN

« on: August 28, 2017, 07:25:18 am »

It is not totally solved.
Even with this configuration above, I need to add the DNS of the other network.
So if I have 10 networks, I need to put 10 DNS on the DHCP server.

This is not what I want.

I'm looking at google, similar cases with multiple dhcp and multiple dns.

I'm trying to do something like that.
http://www.linksysinfo.org/index.php?threads/dns-queries-over-openvpn-site-to-site.69941/

7

17.7 Legacy Series / Re: Resolve DNS by VPN

« on: August 28, 2017, 06:39:08 am »

After much searching, I solved it.

Server: 172.16.0.1
Dnsmasq DNS > Advanced

Code: [Select]

server=/#/172.16.10.1
Server: 172.16.10.1
Dnsmasq DNS > Advanced

Code: [Select]

server=/#/172.16.0.1
Now, the DNS servers can resolve themselves.

8

17.7 Legacy Series / Re: Edit the /conf/config.xml file

« on: August 13, 2017, 04:55:10 am »

I think I've been able to solve the problem.
Firewall, dhcp, dns have returned to the right configuration.

I copied a bkp that was inside the backup folder.
And I used sed to edit the file.

Inside the /conf folder.
# cat config-1502574364.1686.xml | sed 's/lan/~~/g; s/opt1/lan/g; s/~~/opt1/g' > config.xml

So far everything is ok.

9

17.7 Legacy Series / Re: Edit the /conf/config.xml file

« on: August 13, 2017, 04:39:53 am »

I backed up the original file.
And in the /conf/backup folder, I searched the file by the hour, and copied the old file, which I want to edit and restore.

10

17.7 Legacy Series / Edit the /conf/config.xml file - Reassign interfaces

« on: August 13, 2017, 04:03:30 am »

I've been using opnsense for years.
Today, I removed a "LOSE" network interface that I am not using.

My old setup was like this.

vtnet0: WAN
Name: WAN

vtnet1: LAN
Name: LOSE

vtnet2: OPT1
Name: SERVICE

Now it's like this.

vtnet0: WAN
Name: WAN

vtnet1: LAN
Name: SERVICE

I restarted opnsense, and asked to assign the interfaces.
All my settings on the "SERVICE" interface have been lost.
Now I'm trying to restore the settings as I know it's saved in the /conf/config.xml file.
But I do not know how to do this, can anyone help me?

11

17.7 Legacy Series / Re: Resolve DNS by VPN

« on: August 12, 2017, 09:02:45 pm »

If I have 10 networks in VPN, do I need to put the DNS of the 10 networks in the DHCP of all the networks?

12

17.7 Legacy Series / Resolve DNS by VPN

« on: August 02, 2017, 08:15:02 am »

I have two networks, in VPN "IPSEC"

172.16.0.0/24
172.16.0.1 - opnsense
172.16.0.50 - zabbix-ct
172.16.0.108 - repository-ct

172.16.10.0/24
172.16.10.1 - opnsense2
172.16.10.10 - gameserver-ct
172.16.10.51 - storage-ct

Zabbix-ct ping in repository-ct
Gameserver-ct ping storage-ct

But zabbix-ct does not ping gameserver-ct
Ping works if you put the IP, but the name does not.

13

17.1 Legacy Series / Re: Internet slow on lan interface

« on: April 27, 2017, 05:59:05 am »

I do not know if the problem is connecting the "container" to opnsense, or lan (interface) to wan (interface) in opnsense.

14

17.1 Legacy Series / Re: Internet slow on lan interface

« on: April 27, 2017, 05:52:14 am »

My settings are like this.

15

17.1 Legacy Series / Re: Internet slow on lan interface

« on: April 26, 2017, 01:35:46 am »

Router -> proxmox -> opnsense (proxmox) -> container (proxmox)

The container connection to opnsense, is through the internal proxmox network.
When I connect the container directly to the router, without going through opnsense, I can use the maximum speed of 50down / 30up.

The type of network interface is Virtio, I've already tried putting e1000, but it still has the same problem.