Messages

1

Hardware and Performance / Re: CPU recommendations for 1Gbps w/PPPoE

« on: November 27, 2023, 09:32:55 am »

with the setting from my previous post I was able to get 1Gbps PPPoE with j3160, J4125 (as reported here) handle 1Gbps PPPoE w/o tuning, most probably N100 will handle 2.5GBps PPPoE without issue

https://www.cpu-monkey.com/it/compare_cpu-intel_celeron_j3160-vs-intel_processor_n100

2

23.7 Legacy Series / Re: OPNsense 23.7.7 Upgrade Problem

« on: October 25, 2023, 12:53:22 pm »

Installed packages to be REMOVED:
   mpd5: 5.9_16
   openssl: 1.1.1w,1
   opnsense: 23.7.6


this looks very bad

3

Hardware and Performance / Re: CPU recommendations for 1Gbps w/PPPoE

« on: June 13, 2023, 05:16:07 pm »

maybe i was luckly, after switching from the isp router to opnsense I noticed the poor performance and after few read I found a big difference with:

net.isr.dispatch=deferred
net.isr.maxthreads=-1
net.isr.bindthreads=1

the rest make some kind of difference but not big as this one

btw FW4B is a rebranded YL-J3160L4 (I'm running protectcli coreboot bios on it)

4

Hardware and Performance / Re: CPU recommendations for 1Gbps w/PPPoE

« on: June 13, 2023, 09:43:36 am »

@Prevok that wasn't my case
my box with default settings cant reach 500Mbit, probably due the weak cpu

5

Hardware and Performance / Re: CPU recommendations for 1Gbps w/PPPoE

« on: May 31, 2023, 01:14:45 pm »

For reference I have a MiniPC YL-J3160L4 which is an Intel(R) Celeron(R) CPU J3160 @ 1.60GHz (4 cores, 4 threads) with 4GB of ram and 4x1GBit ethernet (Intel(R) I210 Flashless (Copper))

Recently I change my connection from vdsl2 200/30 to ftth 1000/300
Initially I have just swapped the "isp router" and everything was working fine with speedtest results up to 906/310
As the new isp modem is an huge white box which is very ugly and as all Italian (maybe europe?) FTTH ISP use PPPoE and OPNSense support it, I decided to remove the "isp router" and use directly the OPNSense box and here started my trouble with performance which dropped down to 430/310

after some reading here, pfsense and general freebsd forums I found a configuration that raised performance up to 902/310

Enabled powerd
Disabled Hardware CRC/TSO/LRO and VLAN Filtering
Adjusted this Tunables:

Code: [Select]

net.isr.dispatch=deferred
net.isr.maxthreads=-1
net.isr.bindthreads=1
net.inet.ip.intr_queue_maxlen=3000
net.inet.rss.enabled=1
dev.igb.0.iflib.override_qs_enable=1

only the last one is hw specific for my Intel I210 and igb0 is the interface connected to the Optical Network Terminal (Optical to Ethernet signal converter)

about VoIP in OPNSense I have assigned a static Lan IP to the Wan interface of the "isp modem" and added a Port Forward of WAN address port 5060/UDP to the previous static IP and I was able to move the isp modem away from my eyes

6

20.7 Legacy Series / Re: Virtual IPs not shown on dashboard any more?

« on: May 14, 2020, 12:52:40 pm »

check under Interfaces

7

20.7 Legacy Series / Re: 20.7-BETA images with HBSD 12.1

« on: April 14, 2020, 02:19:18 pm »

I did a test on kvm with virtio net driver, and a quick test shows a big performance improvement 2/3 times faster than 20.1 (I guess is the driver update from 11.2 to 12.1) 

8

18.1 Legacy Series / Re: Letsencrypt new certificate dropdown list Validation Method empty

« on: May 04, 2018, 12:33:53 pm »

i have similar issue with haproxy

https://github.com/opnsense/core/issues/2389

9

17.7 Legacy Series / Re: 17.7.4 - no web proxy config replication in HA mode

« on: November 14, 2017, 07:42:48 pm »

anyway for user side is not really clear
i have also noticed saving and apply a firewall rule (even without a change) do the synchronization

i guess this should apply for all or most of the service, could be clearer and easier to handle an apply button which sync conf and restart the service in both appliance?