Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - mr.yx

#1
+add me to the list...

syslog 1 core @100%
configd 1core @100%
#2
21.1 Legacy Series / Re: THANK YOU
January 29, 2021, 10:31:57 PM
+1
keep up the good work!
#3
Upgraded to 21.1 on an old APU2 took about 10mins.
#4
i am just curious, what i7 do you have that gets those scores? did u bench it with the singlecore flag (ubench -sc)?

a modern coffeelake with 4.2ghz gets arround 690k on single...
#6
i have the package reinstalled several times since 1.6 release because i thought something was broken with mailreports, is there any change to the package since then?

Version        : 1.6
Installed on   : Thu Sep 17 13:40:13 2020 CEST

also mellanox connectx3 LAN (no surricata) + vlans are still not working, defaults to emulated netmap driver, non vlan traffic flows, vlan traffic gets blocked/denied.

sys.device.mlx4_core0.hw.fw_version: 2.42.5000 (newest firmware)
dev.mlx4_core.0.%desc: Mellanox driver (3.5.1)

#7
Quote from: marcri on September 18, 2020, 12:25:01 PM
Thanks for Sensei 1.6., but reports via E-Mail are not working anymore:

[f26d747d-5635-45b5-8b14-103a9c50cc69] Script action failed with Command '/usr/local/opnsense/scripts/OPNsense/Sensei/report-gen/send.py --pdf 'false' --server 'xxxx' --port '587' --secured 'TLS' --username 'xxx' --password 'xxx' --sender 'xxx' --to 'xxx' returned non-zero exit status 1. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 479, in execute stdout=output_stream, stderr=error_stream) File "/usr/local/lib/python3.7/subprocess.py", line 363, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/OPNsense/Sensei/report-gen/send.py --pdf 'false' [...xxx...] returned non-zero exit status 1.

same for me, with a local mailsrv (without auth).
#8
20.7 Legacy Series / Re: Sensei 1.6 blocking Spotify
September 17, 2020, 12:54:32 PM
disable block parked domains @sensei or add an exception. check live view of sensei - reports
#9
20.7 Legacy Series / Re: Call for testing: netmap on 20.7
September 12, 2020, 07:09:24 PM
its a connectx3 with mlx4en driver loaded. would you mind to show enabled options? ifconfig -m mlx4enX

did you use the beta or stable sensei engine? was it using default netmap or the emulated driver?

thanks in advance

edit2:

mlxen0: flags=28943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
        options=8c00a8<VLAN_MTU,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE>
        capabilities=ed07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        ether f4:52:14:7a:9b:a0
        inet6 fe80::f652:14ff:fe7a:9ba0%mlxen0 prefixlen 64 scopeid 0x7
        inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
        media: Ethernet autoselect (10Gbase-CX4 <full-duplex,rxpause,txpause>)
        status: active
        supported media:
                media autoselect
                media 40Gbase-CR4 mediaopt full-duplex
                media 10Gbase-CX4 mediaopt full-duplex
                media 10Gbase-SR mediaopt full-duplex
                media 1000baseT mediaopt full-duplex
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>


also tested it with surricata in ips mode (https://docs.google.com/spreadsheets/u/0/d/1RVj8K3XOzWi-Bkjq6hUxWudu7Cxd8FFTqjLiBMzZWEM/htmlview#gid=0)

same result like active sensei, no vlan traffic/all denied.

ifconfig mlxen0 -vlanhwtso has no effect, still enabled afterwards.

mlx4_core0@pci0:2:0:0:  class=0x020000 card=0x005515b3 chip=0x100315b3 rev=0x00 hdr=0x00
    vendor     = 'Mellanox Technologies'
    device     = 'MT27500 Family [ConnectX-3]'
    class      = network
    subclass   = ethernet



dev.mlx4_core.0.%parent: pci2
dev.mlx4_core.0.%pnpinfo: vendor=0x15b3 device=0x1003 subvendor=0x15b3 subdevice=0x0055 class=0x020000
dev.mlx4_core.0.%location: slot=0 function=0 dbsf=pci0:2:0:0 handle=\_SB_.PCI0.PEG2.PEGP
dev.mlx4_core.0.%driver: mlx4_core
dev.mlx4_core.0.%desc: Mellanox driver (3.5.1)
dev.mlx4_core.%parent:


edit3: maybe related?

https://redmine.pfsense.org/issues/10836
#10
20.7 Legacy Series / Re: Call for testing: netmap on 20.7
September 12, 2020, 06:22:20 PM
Any news on the 1.6 release, 1.5.2_1 with opnsense 20.7.2 mit mlx4en as lan (+several attached vlans to it) is not working. as soon as sensei is enabled all vlan traffic stops, firewall live log shows them as denied, untagged lan is still working.

sensei is running in routed mode (l3), dmesg shows that its using emulated netmap driver.

interface settings: disabled hw crc, tso, lro and hw vlan filtering.

no surricata etc running, as soon as sensei engine is stopped vlans are working again.

i reported this severals days ago via bugreport but ticket is still open.

edit if wrong subforum/thread please move.
#11
20.7 Legacy Series / Re: Slow WAN after upgrade
August 18, 2020, 10:44:25 PM
would also like to know, 20.7.1 is not usable in this state.
#12
20.7 Legacy Series / Re: Slow WAN after upgrade
August 17, 2020, 12:43:50 AM
Observing the same:
20.1.9: 230/45mbit
20.7.1: 130-160/45mbit

same sync, only difference is opnsense version, i tried my backup msata with pfsense and speed is up to normal.

no ids, nothing fancy just upgraded the old install, also tried the powerd (adaptive/max), hasn't changed anything.

used hw: APU.2C4 with intel i210AT