Messages

Hello devhunter55,

If you're seeking for adguard home plugin, mimugmail made it available through his opn-repo:
https://github.com/mimugmail/opn-repo

There's a forum thread on steps to follow to install it smoothly:
https://forum.opnsense.org/index.php?topic=22162.msg128415#msg128415

I'm using it since a while now, and works like a charm.

Kind regards,
Vincent

Thanks mimugmail and franco for your answers.

I'll follow your method franco.

Cheers

Just to clarify my request: i'm just asking for the base package available (through command line), not for a complete opnsense webui plugin.

Hello,

Could it be possible to have a feedback on my request?
Positive one would be of course preferred, but any feedback would be appreciated.

Thanks and stay safe
Vincent

Bonjour Darkopnsense,

J'ai fait mes tests avec speedtest (appli dédiée, pas le site web) par praticité.
Il y a donc une marge d'erreur dans les perfs obtenues

Cordialement

Bonjour,

Opnsense sur un PC dédié est une meilleure idée d'un point de vue sécurité, au moins tu es sûr de maîtriser ce qui se passe d'un point de vue physique.

Petite vigilance sur l'apu en fonction de votre débit internet.
J'utilise un apu2c4 depuis quelques temps maintenant, et chez moi le débit plafonne entre 560 et 700 Mbps en fonction des règles de filtrage actives.
Donc si vous avez une liaison 1Gbps, vous ne pourrez pas atteindre le débit max avec un apu2.

Bonne journée

Thanks Gary for your support.
I did the test as planned and there is no obvious performance drop upgrading up to v4.11.0.4. They start to appear with v4.11.0.5.
So it's obviously the new energy efficient parameter that creates the issue.

I've also tried to disable to NIC energy efficiency with your parameter in tunables.
There's a tiny performance bump with them, but that's not a very significant one.
I'm afraid i'll have to resign upgrading to some new hardware to handle my fiber at full gigabit speed with opnsense.

Thanks a lot to your help, and have a nice Easter Monday
Cheers

Thanks for the hint, I will give a try flashing on v4.11.0.4 tomorrow.

I confirm the performance drop on v4.11.0.5 isn't only opnsense/freebsd related.
I tried booting on an openwrt flash drive on the same hardware, and experience performance drop in a worse way even : 940 Mbps down to 340 Mbps.
My fiber line is 1Gbps down / 400 Mbps up. Sadly not reaching full speed with apu2c4 on it. And tried a few performance tuning on it, not sure i have found all though.

I'll keep you informed of the test results with v4.11.0.4 tomorrow.
Have a lovely evening.

Thanks Gary for your support.
I just did test with a 30s unplug before rebooting after flash and still experience the large performance drop with this method.

Happy Easter.
Cheers

Hello.

As a start, i apologize if not the good topic to post that question.

I'm using an APU2C4 with Opnsense up to update (20.1.4).
While flashing coreboot from v4.9.0.5 to v4.11.0.5 I experienced a huge performance drop :
average DL speed :
- v4.9.0.5 : 580~600 Mbps
- v4.11.0.5 : 260~300 Mbps

Reverting coreboot version to v4.9.0.5 turned back speed up to 580~600 Mbps as before.

Is anyone aware of similar problems ?
Did I miss some tunables to set after the firmware upgrade ?

Thanks for your help.
Cheers

There is no subscription needed for it.

It's the locally hosted counterpart of their adguard DNS service.
More info : https://github.com/AdguardTeam/AdGuardHome

It's way more powerful than IP/domains lists since it can use filter grammar of popular adblocker (adblock, ublock, ...).
You can even enforce safe search for search engine, which is very useful for kids :-)

I'm using it so far since 9 months, and am pretty happy of it.
Cheers

Hello,

I'm actually running adguard home to filter my DNS at home, and saw there's official freebsd support.
https://svnweb.freebsd.org/ports/head/www/adguardhome/

I would love to have it embedded in opnsense, that would allow me to get rid of 3rd party server just for it.
Could it be possible to have the package available for manual install ?

Thanks a lot and have a safe day
Vincent

Hello J,

I've checked in /var/log/suricata.log, including history of past days, no track of that set caps error message.

Suricata is bound on igb1 for me, maybe the driver has an impact on the caps.

Cheers,
Vincent

Hello,

For the last suggestion, a less complex way could be to automatically install on the first version a feature is moved into plugin.
And adding in release notes that those modules can be removed if useless after the upgrade.
That way it get smooth for the upgrade, don't requires tricky dialog to add, and lets the user remove unneeded things if documented in the release note

Cheers,
Vinceynt

Hello Anon87 and Franco,

I experienced similar issue with my upgrade path from 17.1.11 to 17.7
My config had suricata enabled (in IDS mode) and DNS activated.
All working fine in 17.1.11

After upgrading to 17.7 i got what seems a similar issue to what Anon87 described: unbound DNS was not resolving any more DNS.
Only exceptions were my local domain hosts entries resolved properly.

Stopping/disabling suricata didn't change to the issue.
But i found in "System > Settings > General" an option that seemed new to me:

Code Select Expand

"Allow DNS server list to be overridden by DHCP/PPP on WAN"
It was checked by default, and unticking it made my DNS magically resolving back external named (and resisting to reboot issue mention by Anon87).

Could it be a reason for you too that the change you makes don't resist for a reboot Anon87?

I hope that experience sharing will help.

Cheers,
Vincent