Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - LeBleu

#1
Hardware and Performance / Re: DEC850 : UFS or ZFS
November 13, 2023, 01:53:24 PM
Quote from: franco on November 13, 2023, 12:54:03 PM
Yep, ZFS. Since a year or so the factory hardware comes shipped with ZFS on root as well.


Cheers,
Franco

Thanks franco
#2
Hardware and Performance / DEC850 : UFS or ZFS
November 13, 2023, 11:37:30 AM
Hi,
I need to reinstall my DEC850 and I wonder which file system is recommended?
It came with UFS, then ZFS support was added to opnsense.
Generic documentation is talking about ZFS, but what about  DEC850 specifically?
I mean, ZFS performance is very bad with nvme. DEC850 have a SSD so maybe performance will not be good.
Do you have some advice or performance benchmark for UFS ou ZFS on DEC850 ?
#3
Hi,
I received and configured my new OPNSense DEC850 appliance.
I tough that whith OPNSense Business edition and certified hardware it will be better but no, I still have issue with errors out.

New configuration :
- OPNSense appliance DEC850
- igb interfaces
- OPNSense Business 21.10.3

Maybe suricata/netmap need to be tweeked to allow full speed with vlan tag ?
There is a field "default packet size" in suricata advances parameter. I suppose packets with vlan tag are larger than normal, should I change this parameter?
#4
Hello,

I have a lot of "errors out" on interfaces with VLAN when suricata/netmap is enable. Errors count increments continuously and it's worst with high load >800Mbps.

My setup :

  • version 22.1.2
  • Proxmox VM
  • 2 interfaces: WAN and LAN, both with VirtIO

Parent interface is assigned and enabled, all hardware offloading is off including VLAN filtering. Suricata is enabled on parent interface.
I have no error on parent interface nor on WAN (no VLAN on WAN)
I tested with Intel E1000 instead of VirtIO without luck, errors are still counting.

Are there any tunables or setting to change to avoid those errors ?

If you need more informations, log, dump I can provide them.

I plan to buy an OPNSense appliance, do someone use it with VLAN and suricata without error on appliance?

Best Regards,