Messages

I'm not quiet sure if I have the same issue or something related...

I updated to 26.7 and I stopped getting a link on the E823-L. In addition the System behaved very unstable/slow on 26.7 when trying to login directly on the console. It took several seconds just to show the login prompt.

I'm on NVM 3.26 since my NIC is embedded SOC and Supermicro is not providing a newer OEM FW...

tried it again. permissions look correctly. still getting the same error. Is it really just copy the file? nothing else to do?

Code Select Expand

ice0: The DDP package module (ice_ddp) failed to load or could not be found. Entering Safe Mode.
ice0: The DDP package module cannot be automatically loaded while booting. You may want to specify ice_ddp_load="YES" in your loader.conf

i reverted and got the same error. I think it was a permission problem. let me try again later. I'll let you know the results.

this did not work. I get following:

Code Select Expand

ice0: The DDP package module (ice_ddp) failed to load or could not be found. Entering Safe Mode.
ice0: The DDP package module cannot be automatically loaded while booting. You may want to specify ice_ddp_load="YES" in your loader.conf

ice_ddp_load="YES" is correctly specified. I also tried to replace the if_ice.ko file and getting the same error.

[1.3.36.0]

Hey Franco

sorry to bother you again. I was inpatient and just installed the beta 25.1.b because you told me Version 25.1 will include the new package anyway. For now it's not the case, it's still showing:

ice0: The DDP package was successfully loaded: ICE OS Default Package version 1.3.36.0, track id 0xc0000001.

Will it come with a later Beta? I know the beta is not containing everything as the production release. But the release notes of the Beta stated it's based on FreeBSD 14.2, so it also should have the new DDP package.

thanks for the clarification!
cheers
Patrick

perfect. thanks alot! :)

Sweet :) For me it doesn't matter. I can wait until early next year. But if you would like me to test I'm happy to do my part ;-)

cheers
Patrick

Hi Franco

sorry there was a typo... I was referring to 24.7.10

OPNsense 24.7.10 released

this is from the FreeBSD 14.2 release notes:

ice has been upgraded to 1.43.2-k. 38a1655adcb3 (Sponsored by Intel Corporation)

ice_ddp has been upgraded to 1.3.41.0. a9d78bb714e3 (Sponsored by Intel Corporation)

cheers
Patrick

[RSS]

Hi there

I was very happy to see an updated Intel ICE driver on release 24.7.10. The driver has been updated to version 1.43.2-k et al

Now I still have issues using RSS on my Intel E823-L. My reverse proxy is crashing on certain conditions and the general speed is not what I would expect with RSS enabled. If I disable RSS the reverse proxy is running fine. I can reproduce this problem.

I saw in the release notes of FreeBSD 14.2 (https://www.freebsd.org/releases/14.2R/relnotes/), that they also updated the ICE Driver to the same version 1.43.2-k. But they also updated the ice_ddp Package to Version 1.3.41.0. At the moment the ice_ddp Package on Opnsense 24.7.10 is 1.3.36.0. Is there a chance that you guys Update the ice_ddp Package to the same version as in Freebsd 14.2, since the driver also has been updated?

Since the ice_ddp Package is specifically needed to support RSS on Intel E800 series NIC's, I was hoping to have my troubles fixed with this ddp package matching the new driver from Freebsd 14.2

Devices based on the Intel(R) Ethernet 800 Series require a Dynamic Device
Personalization (DDP) package file to enable advanced features (such as dynamic
tunneling, Intel(R) Ethernet Flow Director, RSS, and ADQ).

cheers

I just ran into this issue with nginx on 24.1 after enabling rss on a Xeon D-1747NTE. Then I upgraded to Opnsense 24.7 and tried it again. It works so far. Maybe they made some changes in FreeBSD 14.1

Can anybody else confirm this behaviour?

Tried out the RSS feature for a few days on our OPNsense instance (23.1.9-amd64) and while the performance is great, we've run into some weird issues with internal system services not being able to resolve DNS requests. Disabling RSS seems to fix the issue. We are using the Intel ice driver with a 25GbE SOC based NIC. Machine in question: https://www.supermicro.com/en/products/system/iot/1u/sys-110d-20c-fran8tp

Specifically, pkg update and the GeoIP feature in the firewall cannot connect, and I tracked this down to a DNS issue. When running pkg update via CLI or the GUI it hangs on the fetching process, and when running it with debug you can see its stuck at the resolving DNS stage. The GeoIP feature has similar issues.

Interestingly, if you use ping from CLI or use the DNS diagnostic tool, the system resolves DNS requests totally fine. I enabled debug on Unbound and it doesn't appear to even receive the requests from pkg update or GeoIP downloads. Would love to get this fixed so we can use RSS since it handles our 10G symmetrical connection a lot better.

Code Select Expand

user@kappa:/usr/local/etc # pkg -ddddddd update
DBG(1)[34160]> pkg initialized
Updating OPNsense repository catalogue...
DBG(1)[34160]> PkgRepo: verifying update for OPNsense
DBG(1)[34160]> PkgRepo: need forced update of OPNsense
DBG(1)[34160]> Pkgrepo, begin update of '/var/db/pkg/repo-OPNsense.sqlite'
DBG(1)[34160]> Request to fetch pkg+https://pkg.opnsense.org/FreeBSD:13:amd64/23.1/latest/meta.conf
DBG(1)[34160]> opening libfetch fetcher
DBG(1)[34160]> Fetch > libfetch: connecting
DBG(1)[34160]> Fetch: fetching from: https://pkg.opnsense.org/FreeBSD:13:amd64/23.1/latest/meta.conf with opts "iv"
resolving server address: pkg.opnsense.org:443
^ hangs here for a while before retrying and effectively goes no where.