Messages

Can Zenarmor exist on the secondary instance in HA?

if you look under policy, app control, proxy....you will see icloud private rely.

block that you should be good.

Here is what I did:
https://docs.opnsense.org/manual/unbound.html#advanced-configurations
Using this:

server:
local-zone: "mask.icloud.com" static
local-zone: "mask-h2.icloud.com" static

Apple document:
https://developer.apple.com/support/prepare-your-network-for-icloud-private-relay

Findings  show me the upgrade to 22.1 is more resource intensive, in the most simplistic newbie way i could determine.  Things that's worked under 21.7 is now pushing the CPU on 22.1 with my deployment hardware of choice.

I don't think any of my deployments are out of the ordinary however I have IDS/IPS, Zenarmor, Wireguard, OpnVPN, VLAN, telegraph, netdata and ntop running.  Majority of my deployments are Qotom i7-7500U and worked great!

I've tested a few boxes so far with 22.1 and it pushes the single core high in terms of usage.  1 box as already seen performance decrease, removing ntop helped stabilize.

Time for a hardware upgrade it seems....wahooo

Not PPOE.

Trying to get full thru put and use more cores.

If it isn't PPPoE, you can check Interfaces -> Overview to see the interrupt assignments for VMX - it should at least indicate the use of multiple hardware queues. If you have access to a shell, you can check 'vmstat -i' to do the same.

If only one queue is used, that would be the main problem.

Franco,

I am not running  a VM but on a dedicated box.  The processor is Intel(R) Xeon(R) CPU D-1518 @ 2.20GHz (8 cores).  Only 1 core is utilized, limiting speeds to 60% of 1G fiber connection.   Tried the max threads, but no dice.

Any other suggestions?

So now upon a reboot i noticed that i received the core temp high warning.  The temps do go down after the system starts all services and becomes stable.

Checked, nothing is running at 100%....

So far no performance lags in the network.

I have a Qotom i7 that I've been running Opnsense on which consistently stayed about 50-55 prior with 21.7.  Now  its between 63-70 Celsius.

No errors, or anything out of the ordinary that I can tell so far.

When 22.1 is released, is it safe to upgrade with Zenarmor?

I upgrade to the latest opnsense update and saw this morning that the sensei service stopped with hi swap usage.

Any ideas? My system has been working fine for a long time w/ sensei.

Screen shot attached.

I am trying to update one my clients to latest build but its been stuck on fetching 21.7.1 for awhile.  Stuck may not be the actual correct word, the "." indicator is ticking right along...its prob been about 15-20 minutes.  No issues with ISP or network.

so hold off on upgrading to 21.7?

Hello, any issues with upgrading to 21.7 with sensei?

I am also experiencing a "speedtest.net" issue where my fiber is 1G but speedtest is only maxing out at aroudn 500gb up and down.  When running htop, it only shows 1 core maxing out and not using the other cores.  I have a Intel® Xeon® processor D-1518.

Would this tuneable potentially work as well? Thoughts?

Thanks!

Any hardware recommendations for 10G upgrade?

Currently have a qotom i7 been using for the past 2 years, absolutely love that thing.  Excellent performance.

Looking to explore options with 10G NIC.

Wish list:

Decent or lower power consumption
rack mount, 1U ideal but got plenty of space
Front face IO
Mix of 10G and 1G Intel Nics

TIA