1
21.1 Legacy Series / Re: 21.1.9 Upgrade & Insight Aggregator CPU Usage
« on: July 28, 2021, 01:55:13 am »
+add me to the list...
syslog 1 core @100%
configd 1core @100%
syslog 1 core @100%
configd 1core @100%
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
3
21.1 Legacy Series / Re: Upgrade to 21.1 may take *very* long time (>1h)
« on: January 28, 2021, 11:31:02 pm »
Upgraded to 21.1 on an old APU2 took about 10mins.
4
Zenarmor (Sensei) / Re: Sensei throughput cap despite high-performance device
« on: October 05, 2020, 03:26:45 pm »
i am just curious, what i7 do you have that gets those scores? did u bench it with the singlecore flag (ubench -sc)?
a modern coffeelake with 4.2ghz gets arround 690k on single...
a modern coffeelake with 4.2ghz gets arround 690k on single...
6
Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering
« on: September 20, 2020, 03:37:27 am »
i have the package reinstalled several times since 1.6 release because i thought something was broken with mailreports, is there any change to the package since then?
Version : 1.6
Installed on : Thu Sep 17 13:40:13 2020 CEST
also mellanox connectx3 LAN (no surricata) + vlans are still not working, defaults to emulated netmap driver, non vlan traffic flows, vlan traffic gets blocked/denied.
sys.device.mlx4_core0.hw.fw_version: 2.42.5000 (newest firmware)
dev.mlx4_core.0.%desc: Mellanox driver (3.5.1)
Version : 1.6
Installed on : Thu Sep 17 13:40:13 2020 CEST
also mellanox connectx3 LAN (no surricata) + vlans are still not working, defaults to emulated netmap driver, non vlan traffic flows, vlan traffic gets blocked/denied.
sys.device.mlx4_core0.hw.fw_version: 2.42.5000 (newest firmware)
dev.mlx4_core.0.%desc: Mellanox driver (3.5.1)
7
Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering
« on: September 18, 2020, 01:15:26 pm »Thanks for Sensei 1.6., but reports via E-Mail are not working anymore:Code: [Select][f26d747d-5635-45b5-8b14-103a9c50cc69] Script action failed with Command '/usr/local/opnsense/scripts/OPNsense/Sensei/report-gen/send.py --pdf 'false' --server 'xxxx' --port '587' --secured 'TLS' --username 'xxx' --password 'xxx' --sender 'xxx' --to 'xxx' returned non-zero exit status 1. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 479, in execute stdout=output_stream, stderr=error_stream) File "/usr/local/lib/python3.7/subprocess.py", line 363, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/OPNsense/Sensei/report-gen/send.py --pdf 'false' [...xxx...] returned non-zero exit status 1.
same for me, with a local mailsrv (without auth).
8
20.7 Legacy Series / Re: Sensei 1.6 blocking Spotify
« on: September 17, 2020, 12:54:32 pm »
disable block parked domains @sensei or add an exception. check live view of sensei - reports
9
20.7 Legacy Series / Re: Call for testing: netmap on 20.7
« on: September 12, 2020, 07:09:24 pm »
its a connectx3 with mlx4en driver loaded. would you mind to show enabled options? ifconfig -m mlx4enX
did you use the beta or stable sensei engine? was it using default netmap or the emulated driver?
thanks in advance
edit2:
also tested it with surricata in ips mode (https://docs.google.com/spreadsheets/u/0/d/1RVj8K3XOzWi-Bkjq6hUxWudu7Cxd8FFTqjLiBMzZWEM/htmlview#gid=0)
same result like active sensei, no vlan traffic/all denied.
edit3: maybe related?
https://redmine.pfsense.org/issues/10836
did you use the beta or stable sensei engine? was it using default netmap or the emulated driver?
thanks in advance
edit2:
Code: [Select]
mlxen0: flags=28943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
options=8c00a8<VLAN_MTU,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE>
capabilities=ed07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
ether f4:52:14:7a:9b:a0
inet6 fe80::f652:14ff:fe7a:9ba0%mlxen0 prefixlen 64 scopeid 0x7
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
media: Ethernet autoselect (10Gbase-CX4 <full-duplex,rxpause,txpause>)
status: active
supported media:
media autoselect
media 40Gbase-CR4 mediaopt full-duplex
media 10Gbase-CX4 mediaopt full-duplex
media 10Gbase-SR mediaopt full-duplex
media 1000baseT mediaopt full-duplex
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>also tested it with surricata in ips mode (https://docs.google.com/spreadsheets/u/0/d/1RVj8K3XOzWi-Bkjq6hUxWudu7Cxd8FFTqjLiBMzZWEM/htmlview#gid=0)
same result like active sensei, no vlan traffic/all denied.
Code: [Select]
ifconfig mlxen0 -vlanhwtso has no effect, still enabled afterwards.Code: [Select]
mlx4_core0@pci0:2:0:0: class=0x020000 card=0x005515b3 chip=0x100315b3 rev=0x00 hdr=0x00
vendor = 'Mellanox Technologies'
device = 'MT27500 Family [ConnectX-3]'
class = network
subclass = ethernetCode: [Select]
dev.mlx4_core.0.%parent: pci2
dev.mlx4_core.0.%pnpinfo: vendor=0x15b3 device=0x1003 subvendor=0x15b3 subdevice=0x0055 class=0x020000
dev.mlx4_core.0.%location: slot=0 function=0 dbsf=pci0:2:0:0 handle=\_SB_.PCI0.PEG2.PEGP
dev.mlx4_core.0.%driver: mlx4_core
dev.mlx4_core.0.%desc: Mellanox driver (3.5.1)
dev.mlx4_core.%parent:edit3: maybe related?
https://redmine.pfsense.org/issues/10836
10
20.7 Legacy Series / Re: Call for testing: netmap on 20.7
« on: September 12, 2020, 06:22:20 pm »
Any news on the 1.6 release, 1.5.2_1 with opnsense 20.7.2 mit mlx4en as lan (+several attached vlans to it) is not working. as soon as sensei is enabled all vlan traffic stops, firewall live log shows them as denied, untagged lan is still working.
sensei is running in routed mode (l3), dmesg shows that its using emulated netmap driver.
interface settings: disabled hw crc, tso, lro and hw vlan filtering.
no surricata etc running, as soon as sensei engine is stopped vlans are working again.
i reported this severals days ago via bugreport but ticket is still open.
edit if wrong subforum/thread please move.
sensei is running in routed mode (l3), dmesg shows that its using emulated netmap driver.
interface settings: disabled hw crc, tso, lro and hw vlan filtering.
no surricata etc running, as soon as sensei engine is stopped vlans are working again.
i reported this severals days ago via bugreport but ticket is still open.
edit if wrong subforum/thread please move.
11
20.7 Legacy Series / Re: Slow WAN after upgrade
« on: August 18, 2020, 10:44:25 pm »
would also like to know, 20.7.1 is not usable in this state.
12
20.7 Legacy Series / Re: Slow WAN after upgrade
« on: August 17, 2020, 12:43:50 am »
Observing the same:
20.1.9: 230/45mbit
20.7.1: 130-160/45mbit
same sync, only difference is opnsense version, i tried my backup msata with pfsense and speed is up to normal.
no ids, nothing fancy just upgraded the old install, also tried the powerd (adaptive/max), hasn't changed anything.
used hw: APU.2C4 with intel i210AT
20.1.9: 230/45mbit
20.7.1: 130-160/45mbit
same sync, only difference is opnsense version, i tried my backup msata with pfsense and speed is up to normal.
no ids, nothing fancy just upgraded the old install, also tried the powerd (adaptive/max), hasn't changed anything.
used hw: APU.2C4 with intel i210AT
Pages: [1]