Messages

The dev.netmap.ring_num = 1024 recommendation also did not work for me. Setting the value to 2048 addressed my issue. I'm no longer seeing this error: Critical   eastpect stack overflow detected; terminated.

It seems the eastpect service started to have issues way before the last event at 02:44 this morning where it filled the logs every 30 seconds with:

Code Select Expand

2025-06-12T02:44:11 Critical eastpect stack overflow detected; terminated
Now, attempting to start the packet service results in nothing in logs at all.

Same issue. This update caused a disruption in all environments. Seems to be eastpect based on the logs.  Additionally, network traffic stops. The issue is present in emulated and native modes. I'm unsure as to why this wasn't caught during QA.

Hello, I have a genuine question regarding Zenarmor's development. I've noticed there haven't been any updates since February, and the roadmap seems to be on hold. Additionally, the UI hasn't yet been updated to align with the new OPNsense interface. Like many others, I'm really hoping the promised multicore support will be released in July and made accessible beyond just premium users. I sincerely hope the team is doing well and continuing their great work. Thank you for all your efforts!

Yeah, I'm not sure. It does appear that ZA might be in some trouble? No official response to the feedback provided in this thread and the last release in February with no clear indication as to what's being worked on might indicate an issue. Although someone mentioned that the next release is sometime in July.

Comparing Oracle to a packet filter? Sounds like an ZA executive. Multicore support in this day and age should be a base feature. Oracle is relic and has been around for age. I'm fairly confident that there license model was crafted during a time where multicore was a commodity. In this and ages it isn't. Smart watches have multiple cores.

No response because this capability is indeed behind a pay wall. Again, I have not seen a software company charge for multicore support. There absolutely nothing novel with multi-core support. It should be free.

The traffic shaping feature is working properly for me. I'm using the FQ-CoDeL scheduler. No loss of speed or higher latency. You might need to check your configuration or contact your ISP.

Apparently, you need a business license or higher for multi core support. This is laughable. In this day and age, charging for multi core support, seriously? Modern CPU's have had multiple cores for years. What software company charges for multi core support? NONE, except for Zenarmor you need to revisit your strategy. Multi core support is nothing novel or innovative. All modern software applications support it.

what. the whole reason i want multi-core support is so i can downgrade my home hardware to lower TDP cpu... ugh

You can still do it, but you will end to purchase I believe a business or higher license. Multi core won't be supported on home versions. Again, there is NO software company out there that charges for multi core support. Most companies develop there programs to support multiple cores, free of charge.


Zenarmor on the other hand releases software that doesn't support multiple cores and then releases it as a feature that must be paid for. This my friend is comical and probably the reason why no Zenarmor employees have responded to this thread. Because they know it's ludicrous. Could you imagine if Microsoft or Google required a multi core license? Microsoft Word - multi core edition.


What about this. What if Opnsense put receive side scaling (RSS) behind a paywall. For example you need to purchase Opnsense business edition to enable RSS. LOL

Apparently, you need a business license or higher for multi core support. This is laughable. In this day and age, charging for multi core support, seriously? Modern CPU's have had multiple cores for years. What software company charges for multi core support? NONE, except for Zenarmor you need to revisit your strategy. Multi core support is nothing novel or innovative. All modern software applications support it.

I just canceled my Zenarmor subscription. I reviewed the Zenarmor documentation and multi core support is behind a paywall. Apparently, you need a a more comprehensive license for multi core support? CPU's have been multi core for several years. This support should be free.

Hello,

I just wanted to report that the experimental configurations are not effective in terms of FQ-CoDel. Bufferbloat is mitigated correctly if I use the existing traffic shaper configuration. The experimental configurations don't work properly. I'm not sure if the traffic is being shaped as the shaper statistics are not updated.

I understand that these configurations are experimental. I just wanted to report my experience.

Fixed now in RC2 (it's online).

Works great. Thanks Franco.

Many thanks Franco. I wasn't sure if adding the rule was appropriate. The RC is looking good.

I'm not sure if a GitHub  issue was raised. It was discussed in the main the Beta feedback thread (first 3 pages). I thought that issue would have been addressed with the RC. I'll provide an image of my LAN ruleset. The first rule is the one the new rule that I had to add to address the LAN Web-UI issue. Before I added the rule the the default deny rule was blocking access. I'm not sure if this was introduced to address a security issue. Nothing was added to release notes about this.

Nothing fancy here in terms of firewall rules. It took some time for the rule to take effect, although I didn't reset firewall states after I made the change. The OPNsense team should probably weigh in here.

The first rule is the new one that I needed to add to address the WebUI access issue.

LAN firewall ruleset

Thank you @Cljackhammer.

Your fix worked partially. Disabling the packet filter via the command line allowed me to get into the GUI. Unfortunately, I haven't figured out a firewall rule that works to keep it fixed. My configuration is non-standard because it is a test VM. OPNsense is listening on 10.7.1.26 and setting rules to allow 443 to either the IP address or "this firewall" doesn't keep it fixed. It's a test VM, so this is just for fun.

Do you have a link to the issue on GitHub? I searched but couldn't find it. I'd like to help test the fix.

I had the same problem. I was not able access the Web-GUI because a default deny firewall rule was altered with the update that blocks access. I had to disable the packet filter on the command line, then I was able to login and then I specifically had to add a firewall rule to my lan interface allowing ip's from my lan to access the lan address 192.168.1.1 on port 443.

I believe that others have reported this issue, but it hasn't been resolved.

I identified the issue. The Zenarmor periodicals script is doign a pkg info against opnsense. I'm running the opnsense RC, so the package name is is opnsense-devel, resulting in a failure, I addressed it on my end. I assume that this issue will be resolved when I apply the release version of opnsense. I just need to remember to revise the script.