Messages

1

Hardware and Performance / Re: Performance guide question

« on: October 28, 2024, 02:03:58 pm »

And if you are lazy like me..
https://calculat.io/en/number/dec-to-bin/2
Use the bit position...

2

Hardware and Performance / Re: Performance guide question

« on: October 23, 2024, 10:34:13 pm »

What to set for a 2 core system?

3

Hardware and Performance / Re: CPU stuck at 2001

« on: September 16, 2024, 05:03:24 pm »

ok, now the hwpstate_intel (hint.hwpstate_intel.0.disabled =1) is disabled and powerd enabled.

Code: [Select]

$ sysctl dev.cpufreq.0.freq_driver
dev.cpufreq.0.freq_driver: est0


Code: [Select]

sysctl dev.cpu.0.freq_levels
dev.cpu.0.freq_levels: 2001/15000 2000/15000 1900/14088 1800/13193 1700/12317 1600/11459 1500/10617 1400/9796 1200/8199 1100/7426 1000/6670 900/5932 800/5209 700/4502 600/3812 500/3137


Code: [Select]

sysctl dev.cpu.0.freq
dev.cpu.0.freq: 2001
sysctl dev.cpu.1.freq
dev.cpu.1.freq: 1400
sysctl dev.cpu.1.freq
dev.cpu.1.freq: 2001
sysctl dev.cpu.1.freq
dev.cpu.1.freq: 2001
sysctl dev.cpu.1.freq
dev.cpu.1.freq: 2001


Code: [Select]

kalle@OPNsense:~ $ sysctl dev.cpu | grep cx
dev.cpu.1.cx_method: C1/mwait/hwc C2/mwait/hwc C3/mwait/hwc
dev.cpu.1.cx_usage_counters: 389873 923520 7477225
dev.cpu.1.cx_usage: 4.43% 10.50% 85.05% last 6625us
dev.cpu.1.cx_lowest: C3
dev.cpu.1.cx_supported: C1/1/1 C2/2/148 C3/3/506
dev.cpu.0.cx_method: C1/mwait/hwc C2/mwait/hwc C3/mwait/hwc
dev.cpu.0.cx_usage_counters: 442746 917207 7759320
dev.cpu.0.cx_usage: 4.85% 10.05% 85.08% last 125us
dev.cpu.0.cx_lowest: C3
dev.cpu.0.cx_supported: C1/1/1 C2/2/148 C3/3/506


Code: [Select]

sudo powerd -v
powerd: unable to determine AC line status
load   0%, current freq 2001 MHz ( 0), wanted freq 1938 MHz
changing clock speed from 2001 MHz to 2000 MHz
load   0%, current freq 2000 MHz ( 1), wanted freq 1877 MHz
changing clock speed from 2000 MHz to 1900 MHz
load   0%, current freq 1900 MHz ( 2), wanted freq 1818 MHz
load   0%, current freq 1900 MHz ( 2), wanted freq 1761 MHz
changing clock speed from 1900 MHz to 1800 MHz
load   0%, current freq 1800 MHz ( 3), wanted freq 1705 MHz
load   3%, current freq 1800 MHz ( 3), wanted freq 1651 MHz
changing clock speed from 1800 MHz to 1700 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 1599 MHz
changing clock speed from 2001 MHz to 1600 MHz
load   0%, current freq 1600 MHz ( 5), wanted freq 1549 MHz
load   3%, current freq 1600 MHz ( 5), wanted freq 1500 MHz
changing clock speed from 1600 MHz to 1500 MHz
load   3%, current freq 1500 MHz ( 6), wanted freq 1453 MHz
load  45%, current freq 1500 MHz ( 6), wanted freq 1743 MHz
changing clock speed from 1500 MHz to 1800 MHz
load   0%, current freq 1800 MHz ( 3), wanted freq 1688 MHz
changing clock speed from 1800 MHz to 1700 MHz
load   0%, current freq 1700 MHz ( 4), wanted freq 1635 MHz
load   3%, current freq 1700 MHz ( 4), wanted freq 1583 MHz
changing clock speed from 1700 MHz to 1600 MHz
load   0%, current freq 1600 MHz ( 5), wanted freq 1533 MHz
load   0%, current freq 1600 MHz ( 5), wanted freq 1485 MHz
changing clock speed from 1600 MHz to 1500 MHz
load   0%, current freq 1500 MHz ( 6), wanted freq 1438 MHz
load   0%, current freq 1500 MHz ( 6), wanted freq 1393 MHz
changing clock speed from 1500 MHz to 1400 MHz
load   0%, current freq 1400 MHz ( 7), wanted freq 1349 MHz
load   0%, current freq 1400 MHz ( 7), wanted freq 1306 MHz
load   5%, current freq 1400 MHz ( 7), wanted freq 1265 MHz
load  14%, current freq 1400 MHz ( 7), wanted freq 1225 MHz
load  82%, current freq 1400 MHz ( 7), wanted freq 4002 MHz
changing clock speed from 1400 MHz to 2001 MHz
load   4%, current freq 2001 MHz ( 0), wanted freq 3876 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3754 MHz
load   3%, current freq 2001 MHz ( 0), wanted freq 3636 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3522 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3411 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3304 MHz
load  26%, current freq 2001 MHz ( 0), wanted freq 3304 MHz
load  66%, current freq 2001 MHz ( 0), wanted freq 4002 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3876 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3754 MHz
load  20%, current freq 2001 MHz ( 0), wanted freq 3636 MHz
load  51%, current freq 2001 MHz ( 0), wanted freq 4002 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3876 MHz
load   4%, current freq 2001 MHz ( 0), wanted freq 3754 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3636 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3522 MHz
load   3%, current freq 2001 MHz ( 0), wanted freq 3411 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3304 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3200 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3100 MHz
load   3%, current freq 2001 MHz ( 0), wanted freq 3003 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2909 MHz
load   4%, current freq 2001 MHz ( 0), wanted freq 2818 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2729 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2643 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2560 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2480 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2402 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2326 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2253 MHz
load  44%, current freq 2001 MHz ( 0), wanted freq 2643 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2560 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2480 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2402 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2326 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2253 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2182 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2113 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2046 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 1982 MHz
changing clock speed from 2001 MHz to 2000 MHz
load   0%, current freq 2000 MHz ( 1), wanted freq 1920 MHz
load  56%, current freq 2000 MHz ( 1), wanted freq 2867 MHz
changing clock speed from 2000 MHz to 2001 MHz
load  15%, current freq 2001 MHz ( 0), wanted freq 2777 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2690 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2605 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2523 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2444 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2367 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2293 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2221 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2151 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2083 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2017 MHz
load 120%, current freq 2001 MHz ( 0), wanted freq 4002 MHz
load  38%, current freq 2001 MHz ( 0), wanted freq 4002 MHz
load   3%, current freq 2001 MHz ( 0), wanted freq 3876 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3754 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3636 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3522 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3411 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3304 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3200 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3100 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3003 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2909 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2818 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2729 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2643 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2560 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2480 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2402 MHz
load   3%, current freq 2001 MHz ( 0), wanted freq 2326 MHz
load  45%, current freq 2001 MHz ( 0), wanted freq 2791 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2703 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2618 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2536 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2456 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2379 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2304 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2232 MHz
load   4%, current freq 2001 MHz ( 0), wanted freq 2162 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2094 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2028 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 1964 MHz
changing clock speed from 2001 MHz to 2000 MHz
load  63%, current freq 2000 MHz ( 1), wanted freq 3299 MHz
changing clock speed from 2000 MHz to 2001 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3195 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3095 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2998 MHz
load   8%, current freq 2001 MHz ( 0), wanted freq 2904 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2813 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2725 MHz
load  14%, current freq 2001 MHz ( 0), wanted freq 2639 MHz
load 154%, current freq 2001 MHz ( 0), wanted freq 4002 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3876 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3754 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3636 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3522 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3411 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3304 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3200 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3100 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 3003 MHz
load   4%, current freq 2001 MHz ( 0), wanted freq 2909 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2818 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2729 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2643 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2560 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2480 MHz
load   3%, current freq 2001 MHz ( 0), wanted freq 2402 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2326 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2253 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2182 MHz
load   6%, current freq 2001 MHz ( 0), wanted freq 2113 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2046 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 1982 MHz
changing clock speed from 2001 MHz to 2000 MHz
load  47%, current freq 2000 MHz ( 1), wanted freq 2484 MHz
changing clock speed from 2000 MHz to 2001 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2406 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2330 MHz
load   0%, current freq 2001 MHz ( 0), wanted freq 2257 MHz
PS.
"sysctl dev.cpu | grep temp" gives me another temperature then the webgui?!

Code: [Select]

sysctl dev.cpu | grep temp
dev.cpu.1.temperature: 43.0C
dev.cpu.1.coretemp.throttle_log: 1
dev.cpu.1.coretemp.tjmax: 105.0C
dev.cpu.1.coretemp.resolution: 1
dev.cpu.1.coretemp.delta: 62
dev.cpu.0.temperature: 46.0C
dev.cpu.0.coretemp.throttle_log: 1
dev.cpu.0.coretemp.tjmax: 105.0C
dev.cpu.0.coretemp.resolution: 1
dev.cpu.0.coretemp.delta: 59

4

Hardware and Performance / Re: CPU stuck at 2001

« on: September 13, 2024, 10:04:35 am »

I would suggest going through all the system bios options. Start with a reset to default to have a baseline and go from there. Possibly power management is currently disabled. Unfortunately, Qotom seems to have a tendency to leave each and every possible bios option visible, so this may be quite laborious.

In System - Settings - Miscellaneous, have you enabled 'powerd' and selected an appropriate governor (adaptive or high adaptive)?

I have now tried many settings in the bios but it seem to not help.
Could it be that the CPU doesent support "hwpstate_intel" (Intel Speed Shift Technology driver) and I need to disable it in OPNS?
https://ark.intel.com/content/www/us/en/ark/products/84992/intel-core-i7-5550u-processor-4m-cache-up-to-3-00-ghz.html

5

Tutorials and FAQs / Re: How to enable automatic microcode updates

« on: August 21, 2024, 04:58:51 pm »

Hi,
How will the manual setup work/coexist with the new plugin?

6

Hardware and Performance / CPU stuck at 2001

« on: August 10, 2024, 09:50:47 pm »

Hi,
I have a Intel i7 5550U that seems to be stuck at 2001mhz even when the system are idling. The temperature are always very high, around ~80C.
Its a Qotom hw, Q5500UG4-P V1.1 with the latest BIOS (2024-01-02).

kalle@OPNsense:~ $ sysctl dev.cpufreq.0.freq_driver
dev.cpufreq.0.freq_driver: est0
kalle@OPNsense:~ $ sysctl dev.cpu.0.freq_levels
dev.cpu.0.freq_levels: 2001/15000 2000/15000 1900/14088 1800/13193 1700/12317 1600/11459 1500/10617 1400/9796 1200/8199 1100/7426 1000/6670 900/5932 800/5209 700/4502 600/3812 500/3137
kalle@OPNsense:~ $ sysctl dev.cpu.0.freq
dev.cpu.0.freq: 2001
kalle@OPNsense:~ $ sysctl dev.cpu.1.freq
dev.cpu.1.freq: 2001

kalle@OPNsense:~ $ sysctl dev.cpu | grep cx
dev.cpu.1.cx_method: C1/mwait/hwc C2/mwait/hwc C3/mwait/hwc
dev.cpu.1.cx_usage_counters: 251704 352780 1194540
dev.cpu.1.cx_usage: 13.99% 19.60% 66.39% last 4766us
dev.cpu.1.cx_lowest: C3
dev.cpu.1.cx_supported: C1/1/1 C2/2/148 C3/3/506
dev.cpu.0.cx_method: C1/mwait/hwc C2/mwait/hwc C3/mwait/hwc
dev.cpu.0.cx_usage_counters: 203383 253748 1245289
dev.cpu.0.cx_usage: 11.94% 14.90% 73.14% last 8539us
dev.cpu.0.cx_lowest: C3
dev.cpu.0.cx_supported: C1/1/1 C2/2/148 C3/3/506

I have added the following tunables but they doesn't seem to help.

dev.hwpstate_intel.0.epp = 99
dev.hwpstate_intel.1.epp = 99
hw.acpi.cpu.cx_lowest = C3 

Do any of you have any suggestions how to get the cpu go lower?

7

Web Proxy Filtering and Caching / Re: Squid Proxy Transparent + OpenVPN + tcp_outgoing_address possible?

« on: May 05, 2024, 10:20:07 am »

Hi,

I'm struggeling with the tcp_outgoing_address parameter, i cant get it to work. I have a working wireguard (road worrior setup) connection and a working squid proxy but when I add the tcp_outgoing_address parameter all the connections through the proxy time out.
Do I need any new routes or fw-rules to get this working?

8

24.1 Legacy Series / Re: Suricata - NUMA nodes

« on: February 22, 2024, 10:16:35 am »

https://redmine.openinfosecfoundation.org/issues/6762

9

24.1 Legacy Series / Re: Suricata - NUMA nodes

« on: February 21, 2024, 09:21:45 am »

It's an upstream issue with Suricata 7.0.3, but it shouldn't matter much. https://github.com/opnsense/core/issues/7260

ok, thank you.

10

24.1 Legacy Series / Suricata - NUMA nodes

« on: February 21, 2024, 07:56:56 am »

Hi,
After the update to 24.1.2 I noticed these entries in the suricata logs. Is it a misconfiguration from my side, do I need to do any thing about these errors.

Code: [Select]

2024-02-20T22:01:12 Error suricata [100315] <Error> -- failed to obtain number of NUMA nodes in the system
2024-02-20T22:01:12 Error suricata [100315] <Error> -- unable to open /sys/devices/system/node/
OPNSense is running on a dedicated Intel hardware.

11

24.1 Legacy Series / Re: 24.1 IDS breaks internet

« on: January 31, 2024, 09:23:13 am »

I have two boxes running nearly the same config. IPS is enabled on both boxes.
One are suffering from this issue and the other one is running fine. Both are based on Intel.

12

24.1 Legacy Series / Re: 24.1 IDS breaks internet

« on: January 30, 2024, 07:07:32 pm »

Same issue here.
Running IPS on the LAN side.
Web-gui get unresponsive after a few minutes and the network works as crap.
Igb interfaces.

13

General Discussion / Re: Lan net or Lan address?

« on: January 19, 2024, 12:03:23 pm »

ok, thank you.
I read this and it helped me clear up my confusion.
https://docs.opnsense.org/manual/firewall_generic.html#address-types

14

General Discussion / Re: Lan net or Lan address?

« on: January 17, 2024, 04:12:37 pm »

So if I want to block all traffic from 192.168.11.0/24 (IoT net) to 192.168.2.0/24 (Default net) I should use (see below)?

Firewall/Rules/IOT
Action: Block
Interface: IOT
Direction: IN
Source: any
Destination: Default address

15

General Discussion / Lan net or Lan address?

« on: January 17, 2024, 03:07:05 pm »

Hi,
When I look into my firewall rules I see  "Lan net" and "Lan address". Whats the difference between these two types and in which cases should they be used?