Messages

I have this hardware
https://pt.aliexpress.com/item/32813348470.html?spm=a2g0s.9042311.0.0.581bb90a17te5z

CPU: Intel(R) Celeron(R) CPU J1900 @ 1.99GHz (4 cores)

I have an opnsense firewall to isolate a network.
To connect on the isolate network, I connect to openvpn 'opnsense'.

PC <> switch1 <> opnsense <> switch2 <> server

Opnsense have 2 interfaces,
interface1: to connect on switch1
interface2: to connect on switch2

I did the speed test with iperf, on 'PC' to 'opnsense' (interface1), and 'server' to 'opnsense' (interface2), and the gigabit network works.

For the PC connect on interface2, I need to use openvpn.
But, the iperf test between 'PC' (with openvpn) and 'opnsense' (interface2), or 'PC' to 'server', connection speed work with 100mbps.

My entire network is gigabit.

[dnsmasq-hosts]

How do I make dnsmasq add the "dnsmasq-hosts" of all servers?

Code Select Expand

root@OPNSENSE-VM:/usr/local/opnsense # ps aux | grep dnsmasq
nobody          30001   0.0  0.2 1081472  4680  -  I    Mon01       0:14.34 /usr/local/sbin/dnsmasq --all-servers --rebind-localhost-ok --stop-dns-rebind -H /var/etc/dnsmasq-hosts ........


How do I put multiple "dnsmasq-hosts"?
Share on nfs

ex:

Code Select Expand

dnsmasq -H /var/etc/dnsmasq-hosts;172.16.10.1:/var/etc/dnsmasq-hosts 

Getting added manually is not a very practical task.

To put multiple DNS in dhcp, also not very practical.

How to synchronize two DNS?

It is possible?

Or how do I do to the network 172.17.0.1 DNS, automatically add the network DHCP 172.16.10.1

How do I do this?
I'll leave opnsense 172.16.0.1 as central dns.

How do I configure 172.16.10.1

I've enabled the option.

In the first field I put "service.local"
In the second field "172.16.0.1"

It is not totally solved.
Even with this configuration above, I need to add the DNS of the other network.
So if I have 10 networks, I need to put 10 DNS on the DHCP server.

This is not what I want.

I'm looking at google, similar cases with multiple dhcp and multiple dns.

I'm trying to do something like that.
http://www.linksysinfo.org/index.php?threads/dns-queries-over-openvpn-site-to-site.69941/

[Server: 172.16.0.1]

After much searching, I solved it.

Server: 172.16.0.1
Dnsmasq DNS > Advanced

Code Select Expand

server=/#/172.16.10.1

Server: 172.16.10.1
Dnsmasq DNS > Advanced

Code Select Expand

server=/#/172.16.0.1

Now, the DNS servers can resolve themselves.

[/conf]

I think I've been able to solve the problem.
Firewall, dhcp, dns have returned to the right configuration.

I copied a bkp that was inside the backup folder.
And I used sed to edit the file.

Inside the /conf folder.
# cat config-1502574364.1686.xml | sed 's/lan/~~/g; s/opt1/lan/g; s/~~/opt1/g' > config.xml

So far everything is ok.

[/conf/backup]

I backed up the original file.
And in the /conf/backup folder, I searched the file by the hour, and copied the old file, which I want to edit and restore.

[vtnet0: WANName: WANvtnet1: LANName: LOSEvtnet2: OPT1Name: SERVICE]

I've been using opnsense for years.
Today, I removed a "LOSE" network interface that I am not using.

My old setup was like this.

vtnet0: WAN
Name: WAN

vtnet1: LAN
Name: LOSE

vtnet2: OPT1
Name: SERVICE

Now it's like this.

vtnet0: WAN
Name: WAN

vtnet1: LAN
Name: SERVICE

I restarted opnsense, and asked to assign the interfaces.
All my settings on the "SERVICE" interface have been lost.
Now I'm trying to restore the settings as I know it's saved in the /conf/config.xml file.
But I do not know how to do this, can anyone help me?

If I have 10 networks in VPN, do I need to put the DNS of the 10 networks in the DHCP of all the networks?

I have two networks, in VPN "IPSEC"

172.16.0.0/24
172.16.0.1 - opnsense
172.16.0.50 - zabbix-ct
172.16.0.108 - repository-ct

172.16.10.0/24
172.16.10.1 - opnsense2
172.16.10.10 - gameserver-ct
172.16.10.51 - storage-ct

Zabbix-ct ping in repository-ct
Gameserver-ct ping storage-ct

But zabbix-ct does not ping gameserver-ct
Ping works if you put the IP, but the name does not.

I do not know if the problem is connecting the "container" to opnsense, or lan (interface) to wan (interface) in opnsense.

My settings are like this.

Router -> proxmox -> opnsense (proxmox) -> container (proxmox)

The container connection to opnsense, is through the internal proxmox network.
When I connect the container directly to the router, without going through opnsense, I can use the maximum speed of 50down / 30up.

The type of network interface is Virtio, I've already tried putting e1000, but it still has the same problem.