Messages

1

22.7 Legacy Series / Re: Update Alias with multible Host entries

« on: March 23, 2023, 08:33:36 pm »

Thx! That was a good hint!
I found no information in web about this.
For any one who run into the same problem:
To define multible hosts in an alias each IP Address has to be seperated by \n
See Examle:
{ "alias": { "name": "test", "content": "1.1.1.1\n2.2.2.2\n3.3.3.3", "enabled" : "1", "type" : "host"}}

2

22.7 Legacy Series / Update Alias with multible Host entries

« on: March 23, 2023, 04:03:21 pm »

I try to update the firewall alias rules with API but run into problems.
I can update a host entry in alias but cannot update multible hosts entries.
Where can I find some references to do this?
Maybe someone has already done such an update.

3

21.1 Legacy Series / Bad OpenVPN performance. aesni not working

« on: April 12, 2021, 12:41:36 am »

Hello all,

I changed from pfSense to OpnSense but have problems with OpenVPN performance.
I have two server which running VMWare on it. Both servers are connected with Gigabit to Internet.
OpnSense (21.1.4) is installed as Virtual Machine with same ressources that the old pfSense. (2.4)
It seems that aesni not working because if I call the command
/usr/local/bin/openssl speed -elapsed -evp aes-256-cbc

I get following response on OpnSense:
You have chosen to measure elapsed time instead of user CPU time.
Doing aes-256-cbc for 3s on 16 size blocks: 80113537 aes-256-cbc's in 3.01s
Doing aes-256-cbc for 3s on 64 size blocks: 24620182 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 256 size blocks: 6538147 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 1024 size blocks: 1664795 aes-256-cbc's in 3.01s
Doing aes-256-cbc for 3s on 8192 size blocks: 209209 aes-256-cbc's in 3.00s
Doing aes-256-cbc for 3s on 16384 size blocks: 104272 aes-256-cbc's in 3.00s
Max 14Mbit

I get following response on pfSense:
Doing aes-256-cbc for 3s on 16 size blocks: 619734 aes-256-cbc's in 0.67s
Doing aes-256-cbc for 3s on 64 size blocks: 562171 aes-256-cbc's in 0.63s
Doing aes-256-cbc for 3s on 256 size blocks: 539758 aes-256-cbc's in 0.59s
Doing aes-256-cbc for 3s on 1024 size blocks: 359694 aes-256-cbc's in 0.35s
Doing aes-256-cbc for 3s on 8192 size blocks: 126727 aes-256-cbc's in 0.15s
More then 200MBit

What I doing wrong?
I searched the wiki and tried a lot things but without success.
Has someone an idea?