Messages

For those looking for a more robust QOS solution for large network look into LibreQoS. The product is primarily for ISP's, but there are are use cases for other types of networks with high number of clients that require reliable service. It works well with OPNsense and its QOS implementatiom provides superior performance over OPNsense built-in traffic shaping/AQM solution. I find that FreeBSD's QOS solution doesn't work well for my use cases and the performance is not as stable. LibreQoS is more reliable.

Upgrading to 2.0.1 addressed my issues as well.

RSS isn't the issue. The problem remains if it's disabled. Something changed with eastpect.

For those that it's failing are you configured for RSS? I see a warning in the console regarding RSS, but it worked in the past.

Same here 2048 is to large. This problem has not been resolved ZA team.

The dev.netmap.ring_num = 1024 recommendation also did not work for me. Setting the value to 2048 addressed my issue. I'm no longer seeing this error: Critical   eastpect stack overflow detected; terminated.

It seems the eastpect service started to have issues way before the last event at 02:44 this morning where it filled the logs every 30 seconds with:

Code Select Expand

2025-06-12T02:44:11 Critical eastpect stack overflow detected; terminated
Now, attempting to start the packet service results in nothing in logs at all.

Same issue. This update caused a disruption in all environments. Seems to be eastpect based on the logs.  Additionally, network traffic stops. The issue is present in emulated and native modes. I'm unsure as to why this wasn't caught during QA.

Hello, I have a genuine question regarding Zenarmor's development. I've noticed there haven't been any updates since February, and the roadmap seems to be on hold. Additionally, the UI hasn't yet been updated to align with the new OPNsense interface. Like many others, I'm really hoping the promised multicore support will be released in July and made accessible beyond just premium users. I sincerely hope the team is doing well and continuing their great work. Thank you for all your efforts!

Yeah, I'm not sure. It does appear that ZA might be in some trouble? No official response to the feedback provided in this thread and the last release in February with no clear indication as to what's being worked on might indicate an issue. Although someone mentioned that the next release is sometime in July.

Comparing Oracle to a packet filter? Sounds like an ZA executive. Multicore support in this day and age should be a base feature. Oracle is relic and has been around for age. I'm fairly confident that there license model was crafted during a time where multicore was a commodity. In this and ages it isn't. Smart watches have multiple cores.

No response because this capability is indeed behind a pay wall. Again, I have not seen a software company charge for multicore support. There absolutely nothing novel with multi-core support. It should be free.

The traffic shaping feature is working properly for me. I'm using the FQ-CoDeL scheduler. No loss of speed or higher latency. You might need to check your configuration or contact your ISP.

Apparently, you need a business license or higher for multi core support. This is laughable. In this day and age, charging for multi core support, seriously? Modern CPU's have had multiple cores for years. What software company charges for multi core support? NONE, except for Zenarmor you need to revisit your strategy. Multi core support is nothing novel or innovative. All modern software applications support it.

what. the whole reason i want multi-core support is so i can downgrade my home hardware to lower TDP cpu... ugh

You can still do it, but you will end to purchase I believe a business or higher license. Multi core won't be supported on home versions. Again, there is NO software company out there that charges for multi core support. Most companies develop there programs to support multiple cores, free of charge.


Zenarmor on the other hand releases software that doesn't support multiple cores and then releases it as a feature that must be paid for. This my friend is comical and probably the reason why no Zenarmor employees have responded to this thread. Because they know it's ludicrous. Could you imagine if Microsoft or Google required a multi core license? Microsoft Word - multi core edition.


What about this. What if Opnsense put receive side scaling (RSS) behind a paywall. For example you need to purchase Opnsense business edition to enable RSS. LOL

Apparently, you need a business license or higher for multi core support. This is laughable. In this day and age, charging for multi core support, seriously? Modern CPU's have had multiple cores for years. What software company charges for multi core support? NONE, except for Zenarmor you need to revisit your strategy. Multi core support is nothing novel or innovative. All modern software applications support it.

I just canceled my Zenarmor subscription. I reviewed the Zenarmor documentation and multi core support is behind a paywall. Apparently, you need a a more comprehensive license for multi core support? CPU's have been multi core for several years. This support should be free.

Hello,

I just wanted to report that the experimental configurations are not effective in terms of FQ-CoDel. Bufferbloat is mitigated correctly if I use the existing traffic shaper configuration. The experimental configurations don't work properly. I'm not sure if the traffic is being shaped as the shaper statistics are not updated.

I understand that these configurations are experimental. I just wanted to report my experience.