Messages

To me this looks like a core/kernel/driver issue, so if you have some time to kill I would definitely try pfsense 2.4.x release (based on FreeBSD 11.3, so it will probably work) *and* the dev 2.5.X dev version based on FBSD 12.1. If you get your usual speed using the 2.5.x, it would probably mean the problem comes from the modification introduced by HBSD in opnsense.

https://docs.netgate.com/pfsense/en/latest/releases/versions.html

Unlikely to be hardware issue on my side, CPU usage is always extremely low, memory usage <10%, disk usage <5%.

Which driver? Are VLANs involved? Promiscuous mode enabled in intrusion detection?


Cheers,
Franco

igb (i210AT) / no vlan / no IDS or anything fancy
WAN through pppoe

Can we backtrack to 20.1 through the same commands you wrote?

Looking at Intel network (em/igb) adapters specifically.... would someone with the issue try this kernel?

# opnsense-update -kr 20.7.1-nopromisc
# opnsense-shell reboot


Thanks,
Franco

This doesn't seem to change anything for me. Someone else with a greater bandwidth reduction than me should confirm.

Is there any link to the procedure about why switching from FreeBSD 11 to 12 does not imply a major number of OPNSense, e.g. from 20.1 to 21.1 (instead of 20.7), if there is a chance of messed up network drivers coming with the new version of FreeBSD? Why is it so "hard" to move back from 20.7 (FreeBSD 12 based) to 20.1 (FreeBSD 11 based)? The OPNSense (update and download) mirrors use a completely different path for this. Having more trouble to revert back from 21 to 20 would at least be kind of more understandable for me (e.g. minor vs. major versions)...

Yes I find the way OPNsense manage their releases messy. But what is worse is that it's not even clear on the wiki on which HardenedBSD versions all the different OPNsense releases are based on.
Add to that the HardenedBSD website which is really bad -- this doesn't help to understand what is going on.

Thats not true, in release notes it's stated they updated to HBSD 12.1.

It's like downgrading Win10 to Win8, no matter at which time of the year this happens.

What is not true?
Clearly it wouldn't hurt if the wiki had a table listing which FreeBSD/HBSD version is used on each release, rather than browsing all the releases docs to find out.

Is there any link to the procedure about why switching from FreeBSD 11 to 12 does not imply a major number of OPNSense, e.g. from 20.1 to 21.1 (instead of 20.7), if there is a chance of messed up network drivers coming with the new version of FreeBSD? Why is it so "hard" to move back from 20.7 (FreeBSD 12 based) to 20.1 (FreeBSD 11 based)? The OPNSense (update and download) mirrors use a completely different path for this. Having more trouble to revert back from 21 to 20 would at least be kind of more understandable for me (e.g. minor vs. major versions)...

Yes I find the way OPNsense manage their releases messy. But what is worse is that it's not even clear on the wiki on which HardenedBSD versions all the different OPNsense releases are based on.
Add to that the HardenedBSD website which is really bad -- this doesn't help to understand what is going on.

Can you guys list your NIC also if you have a similar problem?

Observing the same:
20.1.9: 230/45mbit
20.7.1: 130-160/45mbit

same sync, only difference is opnsense version, i tried my backup msata with pfsense and speed is up to normal.

no ids, nothing fancy just upgraded the old install, also tried the powerd (adaptive/max), hasn't changed anything.

used hw: APU.2C4 with intel i210AT

We have the same NIC, so maybe it's a driver problem.
Looks like there was an update from FreeBSD 11.x to FreeBSD 12.x, some sort of code merge between em and igb drivers, although it doesn't mean there is something wrong... https://www.reddit.com/r/freebsd/comments/alpt9j/freebsd_112_to_120_upgrade_igb_moved_to_em/

From what I understand
OPNsense 20.1 => HardenedBSD 11.x => FreeBSD 11.x
OPNsense 20.7 => HardenedBSD 12.x => FreeBSD 12.x

I have been observing a drop in download speed as well, about 10Mbps; you might think this is not a lot but it is proportionally to what I normally have which is 70/20.
I was blaming my ISP first but it seems to correlate with my upgrade from 20.1 to 20.7.
I am not using anything fancy like IPS/IDS.

edit:  "Intel i210-AT Gigabit Ethernet"  (from manufacturer)
"Intel I210 Gigabit Network Connection" (from `pciconf -lv` command)