Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - cmmh

#1
The dashboard shows version 1.14.4

The packet engine always seems to be stopped when I login to the dashboard.  I start it and it runs for as long as I'm watching it OK.  I don't see anything in the debug logs about why it is stopping, but it does seem to run 12-18 hours before stopping. 

Is there any way to auto-restart it or debug this further?  This is a fresh install of OPNsense.

Thanks for any suggestions.

#2
Any tips for debugging/troubleshooting why Zenarmor (and elasticsearch) seem to stop working within 24 hours? 
#3
I have Geoip Egress and Ingress rules working.  I believe you need to have them on the WAN interface.  Since the "next hop" for devices on the LANs is the OPNsense router itself.

At least that is what I found to work for me after much trial and error. 
#4
21.1 Legacy Series / Re: Remote logging broken?
April 24, 2021, 03:32:47 PM
Yeah, I reported the same problem a while ago and never heard anything. 
#5
Yes, that was the clue.  With the file empty, it was not sending anything to the remote syslog server.

I deleted the remote target and re-added it, and it worked this time.  Unsure what it didn't work the first time and worked now.  I'd say something is flaky. 
#6
Is this a hint as to whats wrong:
root@core-router:/usr/local/etc/syslog-ng.conf.d # ls -ltr
total 12
-rw-r-----  1 root  wheel  245 Jan 31 19:21 legacy.conf
-rw-r-----  1 root  wheel    0 Jan 31 19:21 syslog-ng-destinations.conf
-rw-r-----  1 root  wheel    0 Jan 31 19:21 syslog-ng-local.conf
-rw-r-----  1 root  wheel  259 Jan 31 19:21 syslog-ng-lockout.conf
-rw-r-----  1 root  wheel  346 Jan 31 19:21 syslog-ng-config-events.conf

The "syslog-ng-destinations.conf" is zero length? 
#7
Sorry for the question, probably an obviously solution that I've missed. 

i've set up syslogging to my remote system, on the LAN interface.  My remove receiver is getting logs for other appliances and devices without issue.  I have been unable to get any message from opnsense, though.

I've tried tcpdump-ing on opnsense, and I don't seeing any packets going out.  The counters on the "System: Settings: Logging / targets" statistics page show packets going out. 

For what its worth, I have this problem with 20.7.xxx series, so this isn't specifically a 21.1 issue, I don't think. 

What am I missing ?  Thanks in in advance. 
#8
Thank you for your tunables settings.  They've helped to more than double my throughput from ~300mbit to at last 700 mbits/second.  Still wish I could squeeze out a little more from my 1 Gbps/symmetrical connection but this is highly helpful. 

Hmm, I may have spoken too soon as now I'm having trouble getting over 400 Mbits again.
#9
Fios connections are indeed shared by multiple users.  Usually with smaller ratios than Cable. 
From the FIOS FAQ at broadbandreports.com

FiOS networks are built upon Passive Optical Networks.

BPON conforms to the ITU-T G983.1 specification which is capable of 622 Mbps download and 155 Mbps upload. Each BPON fiber is split using an optical splitter to serve 16 or 32 users.

GPON conforms to the ITU-T G984.1 specification. Verizon's GPON implementation uses Gig-E instead of ATM that was used with BPON. A 2.4 Gbps download speed coupled with a 1.2 Gbps upload speed. Each GPON fiber is split to serve 16, 32, or 64 users per fiber.

BPON ONT users have a max speed of 50/50-75/75, and are switched to GPON when a faster speed is ordered. All new installs are done with GPON.


I did have success doubling my speed by turning on the hardware offloading to 600 Mbps up and down.  Still shy of the 800 MBps I was able to get with my edgerouter X.  MTU changes had not speed change
#10
You're doing better than me.  I have built an OPNSense router using an HP610t thin client with a quad-port Intel GigE PCIe card.  I'm using two ports on that card during this test.  I believe that it has 8x lane PCIe interface.

Retrieving speedtest.net configuration...
Testing from Verizon Fios (74.96.xxx.xxx)...
Retrieving speedtest.net server list...
Selecting best server based on ping...
Hosted by Xiber LLC (Washington, DC) [21.78 km]: 6.96 ms
Testing download speed................................................................................
Download: 333.60 Mbit/s
Testing upload speed................................................................................................
Upload: 538.73 Mbit/s

Keep in mind that FIOS bandwidth is shared with your neighbors.   If others are heavily using FIOS your bandwidth will be affected.