Messages

1

24.7 Production Series / Intel X550-T2 at 2.5 Gbps link speed

« on: November 17, 2024, 03:00:45 pm »

Hi,
I read some trouble to use the intel x550-t2 card on linux based boxes at 2.5 Gbit link speed.

which is the situation now ?

thanks

2

Hardware and Performance / Re: How is Realtek Reliability These Days?

« on: October 15, 2024, 09:44:56 pm »

So, I guess my question is this.   How reliable are Realtek chips in something like OPNSense these days?

I am planning on building an embedded system, and locating it remotely where it is inconvenient (but not impossible) to get at should it go unresponsive.

Meanwhile I am seeing some really attractive embedded industrial boards with dual Realtek 8111H ports on them.

  Or is it fine these days?

I'd appreciate any input.

ù

I've build a VM image with opnsense and I'm using a 4 port Realtek Nic card .For now I've not found any issue about it

3

General Discussion / Which is the right DNS configuration

« on: October 13, 2024, 05:35:40 pm »

I've a fiber link in PPPoE . My OPNsense router is DHCP server .

On every client in my lan network i can see in the nic settings the DNS field has the router IP address.

/ system/ settings / general / Allow DNS server list to be overridden by DHCP/PPP on WAN is checked .

At interfaces / overview / wan field / routes I can see my ISP Dns servers and google address . I've not set the google address .

Please help me to achieve the best configuration

thanks

4

24.7 Production Series / Just updated to latest release but locked to fetching

« on: October 09, 2024, 09:20:37 pm »

Following what update process have done :
***GOT REQUEST TO UPDATE***
Currently running OPNsense 24.7.5_3 at Wed Oct  9 20:24:57 CEST 2024
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (116 candidates): .......... done
Processing candidates (116 candidates): .... done
The following 36 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   py311-ldap3: 2.9.1

Installed packages to be UPGRADED:
   boost-libs: 1.84.0 -> 1.85.0
   ca_root_nss: 3.93 -> 3.104
   curl: 8.10.0_1 -> 8.10.1
   dhcp6c: 20240919 -> 20241008
   easy-rsa: 3.2.1,1 -> 3.2.1_1,1
   isc-dhcp44-server: 4.4.3P1_1 -> 4.4.3P1_2
   json-c: 0.17 -> 0.18
   kea: 2.6.1 -> 2.6.1_1
   monit: 5.33.0_1 -> 5.34.1
   opnsense: 24.7.5_3 -> 24.7.6
   opnsense-update: 24.7.5 -> 24.7.6
   php82: 8.2.23 -> 8.2.24
   php82-ctype: 8.2.23 -> 8.2.24
   php82-curl: 8.2.23 -> 8.2.24
   php82-dom: 8.2.23 -> 8.2.24
   php82-filter: 8.2.23 -> 8.2.24
   php82-gettext: 8.2.23 -> 8.2.24
   php82-ldap: 8.2.23 -> 8.2.24
   php82-mbstring: 8.2.23 -> 8.2.24
   php82-pcntl: 8.2.23 -> 8.2.24
   php82-pdo: 8.2.23 -> 8.2.24
   php82-session: 8.2.23 -> 8.2.24
   php82-simplexml: 8.2.23 -> 8.2.24
   php82-sockets: 8.2.23 -> 8.2.24
   php82-sqlite3: 8.2.23 -> 8.2.24
   php82-xml: 8.2.23 -> 8.2.24
   php82-zlib: 8.2.23 -> 8.2.24
   py311-anyio: 4.4.0 -> 4.6.0
   py311-dnspython: 2.6.1,1 -> 2.7.0,1
   py311-duckdb: 1.0.0 -> 1.1.1
   py311-idna: 3.8 -> 3.10
   py311-tzdata: 2024.1 -> 2024.2
   readline: 8.2.13 -> 8.2.13_1
   suricata: 7.0.6_2 -> 7.0.7
   unbound: 1.21.0 -> 1.21.1

Number of packages to be installed: 1
Number of packages to be upgraded: 35

The process will require 12 MiB more space.
51 MiB to be downloaded.
[1/36] Fetching py311-anyio-4.6.0.pkg: .......... done
[2/36] Fetching unbound-1.21.1.pkg: .......... done
[3/36] Fetching php82-session-8.2.24.pkg: ..... done
[4/36] Fetching opnsense-update-24.7.6.pkg: ..... done
[5/36] Fetching monit-5.34.1.pkg: .......... done
[6/36] Fetching boost-libs-1.85.0.pkg: .......... done
[7/36] Fetching php82-zlib-8.2.24.pkg: ... done
[8/36] Fetching php82-dom-8.2.24.pkg: ......... done
[9/36] Fetching php82-simplexml-8.2.24.pkg: ... done
[10/36] Fetching json-c-0.18.pkg: ......... done
[11/36] Fetching easy-rsa-3.2.1_1,1.pkg: ....... done
[12/36] Fetching py311-idna-3.10.pkg: .......... done
[13/36] Fetching php82-pdo-8.2.24.pkg: ....... done
[14/36] Fetching php82-curl-8.2.24.pkg: ...... done
[15/36] Fetching dhcp6c-20241008.pkg: ......... done
[16/36] Fetching php82-mbstring-8.2.24.pkg: .......... done
[17/36] Fetching isc-dhcp44-server-4.4.3P1_2.pkg: .......... done
[18/36] Fetching php82-ldap-8.2.24.pkg: ..... done
[19/36] Fetching ca_root_nss-3.104.pkg: .......... done
[20/36] Fetching py311-dnspython-2.7.0,1.pkg: .......... done
[21/36] Fetching py311-ldap3-2.9.1.pkg: .......... done
[22/36] Fetching kea-2.6.1_1.pkg: .......... done
[23/36] Fetching py311-tzdata-2024.2.pkg: .......... done
[24/36] Fetching php82-sockets-8.2.24.pkg: ...... done
[25/36] Fetching php82-8.2.24.pkg: .......... done
[26/36] Fetching php82-sqlite3-8.2.24.pkg: .... done
[27/36] Fetching php82-pcntl-8.2.24.pkg: ... done
[28/36] Fetching php82-xml-8.2.24.pkg: ... done
[29/36] Fetching curl-8.10.1.pkg: .......... done
[30/36] Fetching suricata-7.0.7.pkg: .......... done
[31/36] Fetching php82-gettext-8.2.24.pkg: . done
[32/36] Fetching opnsense-24.7.6.pkg: .......... done
[33/36] Fetching py311-duckdb-1.1.1.pkg: .......... done
[34/36] Fetching readline-8.2.13_1.pkg: .......... done
[35/36] Fetching php82-ctype-8.2.24.pkg: . done
[36/36] Fetching php82-filter-8.2.24.pkg: ... done
Checking integrity... done (0 conflicting)
[1/36] Upgrading readline from 8.2.13 to 8.2.13_1...
[1/36] Extracting readline-8.2.13_1: .......... done
[2/36] Upgrading py311-idna from 3.8 to 3.10...
[2/36] Extracting py311-idna-3.10: .......... done
[3/36] Upgrading py311-anyio from 4.4.0 to 4.6.0...
[3/36] Extracting py311-anyio-4.6.0: .......... done
[4/36] Upgrading php82 from 8.2.23 to 8.2.24...
[4/36] Extracting php82-8.2.24: .......... done
[5/36] Upgrading php82-zlib from 8.2.23 to 8.2.24...
[5/36] Extracting php82-zlib-8.2.24: ........ done
[6/36] Upgrading py311-tzdata from 2024.1 to 2024.2...
[6/36] Extracting py311-tzdata-2024.2: .......... done
[7/36] Upgrading php82-xml from 8.2.23 to 8.2.24...
[7/36] Extracting php82-xml-8.2.24: ......... done
[8/36] Upgrading php82-session from 8.2.23 to 8.2.24...
[8/36] Extracting php82-session-8.2.24: .......... done
[9/36] Upgrading boost-libs from 1.84.0 to 1.85.0...
[9/36] Extracting boost-libs-1.85.0: .......... done
[10/36] Upgrading json-c from 0.17 to 0.18...
[10/36] Extracting json-c-0.18: .......... done
[11/36] Upgrading easy-rsa from 3.2.1,1 to 3.2.1_1,1...
[11/36] Extracting easy-rsa-3.2.1_1,1: .......... done
[12/36] Upgrading php82-pdo from 8.2.23 to 8.2.24...
[12/36] Extracting php82-pdo-8.2.24: .......... done
[13/36] Upgrading php82-mbstring from 8.2.23 to 8.2.24...
[13/36] Extracting php82-mbstring-8.2.24: .......... done
[14/36] Upgrading curl from 8.10.0_1 to 8.10.1...
[14/36] Extracting curl-8.10.1: .......... done
[15/36] Upgrading unbound from 1.21.0 to 1.21.1...
===> Creating groups
Using existing group 'unbound'
===> Creating users
Using existing user 'unbound'
[15/36] Extracting unbound-1.21.1: .......... done
[16/36] Upgrading opnsense-update from 24.7.5 to 24.7.6...
[16/36] Extracting opnsense-update-24.7.6: .......... done
[17/36] Upgrading monit from 5.33.0_1 to 5.34.1...
[17/36] Extracting monit-5.34.1: ....... done
[18/36] Upgrading php82-dom from 8.2.23 to 8.2.24...
[18/36] Extracting php82-dom-8.2.24: .......... done
[19/36] Upgrading php82-simplexml from 8.2.23 to 8.2.24...
[19/36] Extracting php82-simplexml-8.2.24: ......... done
[20/36] Upgrading php82-curl from 8.2.23 to 8.2.24...
[20/36] Extracting php82-curl-8.2.24: .......... done
[21/36] Upgrading dhcp6c from 20240919 to 20241008...
[21/36] Extracting dhcp6c-20241008: ........ done
[22/36] Upgrading isc-dhcp44-server from 4.4.3P1_1 to 4.4.3P1_2...
===> Creating groups
Using existing group 'dhcpd'
===> Creating users
Using existing user 'dhcpd'
[22/36] Extracting isc-dhcp44-server-4.4.3P1_2: .......... done
[23/36] Upgrading php82-ldap from 8.2.23 to 8.2.24...
[23/36] Extracting php82-ldap-8.2.24: ........ done
[24/36] Upgrading ca_root_nss from 3.93 to 3.104...
[24/36] Extracting ca_root_nss-3.104: ...... done
[25/36] Upgrading py311-dnspython from 2.6.1,1 to 2.7.0,1...
[25/36] Extracting py311-dnspython-2.7.0,1: .......... done
[26/36] Installing py311-ldap3-2.9.1...
[26/36] Extracting py311-ldap3-2.9.1: .......... done
[27/36] Upgrading kea from 2.6.1 to 2.6.1_1...
[27/36] Extracting kea-2.6.1_1: .......... done
[28/36] Upgrading php82-sockets from 8.2.23 to 8.2.24...
[28/36] Extracting php82-sockets-8.2.24: .......... done
[29/36] Upgrading php82-sqlite3 from 8.2.23 to 8.2.24...
[29/36] Extracting php82-sqlite3-8.2.24: ......... done
[30/36] Upgrading php82-pcntl from 8.2.23 to 8.2.24...
[30/36] Extracting php82-pcntl-8.2.24: ......... done
[31/36] Upgrading suricata from 7.0.6_2 to 7.0.7...
[31/36] Extracting suricata-7.0.7: .......... done
[32/36] Upgrading php82-gettext from 8.2.23 to 8.2.24...
[32/36] Extracting php82-gettext-8.2.24: ........ done
[33/36] Upgrading py311-duckdb from 1.0.0 to 1.1.1...
[33/36] Extracting py311-duckdb-1.1.1: .......... done
[34/36] Upgrading php82-ctype from 8.2.23 to 8.2.24...
[34/36] Extracting php82-ctype-8.2.24: ........ done
[35/36] Upgrading php82-filter from 8.2.23 to 8.2.24...
[35/36] Extracting php82-filter-8.2.24: ......... done
[36/36] Upgrading opnsense from 24.7.5_3 to 24.7.6...
[36/36] Extracting opnsense-24.7.6: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Migrated OPNsense\Trust\General from 0.0.0 to 1.0.1
Migrated OPNsense\Kea\KeaDhcpv4 from 1.0.0 to 1.0.1
Writing firmware settings: FreeBSD OPNsense
Writing trust files...done.
Traceback (most recent call last):
  File "/usr/local/opnsense/scripts/system/certctl.py", line 203, in <module>
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
    cmds[sys.argv[1]]()
  File "/usr/local/opnsense/scripts/system/certctl.py", line 160, in cmd_rehash
    os.symlink(src_filename, dst_filename)
FileNotFoundError: [Errno 2] No such file or directory: '/usr/share/certs/untrusted/thawte_Primary_Root_CA.pem' -> '/etc/ssl/blacklisted/2e4eed3c.0'
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring system logging...done.
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
You may need to manually remove /usr/local/openssl/cert.pem if it is no longer needed.
You may need to manually remove /usr/local/etc/kea/keactrl.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/classification.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/reference.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/suricata.yaml if it is no longer needed.
=====
Message from opnsense-24.7.6:

--
Rising up, back on the street...
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
   /var/cache/pkg/php82-zlib-8.2.24.pkg
   /var/cache/pkg/easy-rsa-3.2.1_1,1~2fb451b3f7.pkg
   /var/cache/pkg/py311-tzdata-2024.2~bb86035cc5.pkg
   /var/cache/pkg/opnsense-update-24.7.6~d42055dd7d.pkg
   /var/cache/pkg/php82-session-8.2.24.pkg
   /var/cache/pkg/py311-idna-3.10.pkg
   /var/cache/pkg/curl-8.10.1~ebbe318c92.pkg
   /var/cache/pkg/php82-pdo-8.2.24.pkg
   /var/cache/pkg/suricata-7.0.7.pkg
   /var/cache/pkg/php82-pcntl-8.2.24~5dffa04fd3.pkg
   /var/cache/pkg/py311-idna-3.10~938bade72d.pkg
   /var/cache/pkg/vnstat-2.12~e02da75052.pkg
   /var/cache/pkg/php82-sqlite3-8.2.24.pkg
   /var/cache/pkg/ca_root_nss-3.104.pkg
   /var/cache/pkg/php82-8.2.24~6167948aa6.pkg
   /var/cache/pkg/opnsense-24.7.6~ea1be4c656.pkg
   /var/cache/pkg/json-c-0.18.pkg
   /var/cache/pkg/php82-ldap-8.2.24.pkg
   /var/cache/pkg/curl-8.10.1.pkg
   /var/cache/pkg/isc-dhcp44-server-4.4.3P1_2.pkg
   /var/cache/pkg/php82-curl-8.2.24.pkg
   /var/cache/pkg/unbound-1.21.1~f666789069.pkg
   /var/cache/pkg/php82-simplexml-8.2.24.pkg
   /var/cache/pkg/py311-ldap3-2.9.1.pkg
   /var/cache/pkg/dhcp6c-20241008.pkg
   /var/cache/pkg/php82-gettext-8.2.24~cd1409f9f1.pkg
   /var/cache/pkg/php82-zlib-8.2.24~491a16b555.pkg
   /var/cache/pkg/php82-filter-8.2.24~51fe33eca8.pkg
   /var/cache/pkg/os-vnstat-1.3_1~67ff3b1f30.pkg
   /var/cache/pkg/php82-ctype-8.2.24.pkg
   /var/cache/pkg/unbound-1.21.1.pkg
   /var/cache/pkg/suricata-7.0.7~ffa1fe90b2.pkg
   /var/cache/pkg/os-vnstat-1.3_1.pkg
   /var/cache/pkg/php82-filter-8.2.24.pkg
   /var/cache/pkg/monit-5.34.1.pkg
   /var/cache/pkg/kea-2.6.1_1~279496f3a2.pkg
   /var/cache/pkg/php82-mbstring-8.2.24.pkg
   /var/cache/pkg/py311-anyio-4.6.0.pkg
   /var/cache/pkg/monit-5.34.1~2038019ce7.pkg
   /var/cache/pkg/ca_root_nss-3.104~7d77a5b4ff.pkg
   /var/cache/pkg/py311-dnspython-2.7.0,1~fe3305640b.pkg
   /var/cache/pkg/php82-session-8.2.24~8903525d57.pkg
   /var/cache/pkg/kea-2.6.1_1.pkg
   /var/cache/pkg/php82-sockets-8.2.24.pkg
   /var/cache/pkg/php82-xml-8.2.24.pkg
   /var/cache/pkg/opnsense-update-24.7.6.pkg
   /var/cache/pkg/py311-dnspython-2.7.0,1.pkg
   /var/cache/pkg/py311-duckdb-1.1.1~bc674435a7.pkg
   /var/cache/pkg/php82-mbstring-8.2.24~b0345a14a7.pkg
   /var/cache/pkg/boost-libs-1.85.0.pkg
   /var/cache/pkg/php82-xml-8.2.24~940e311c3c.pkg
   /var/cache/pkg/php82-curl-8.2.24~31163cafd0.pkg
   /var/cache/pkg/php82-dom-8.2.24~14856ee47d.pkg
   /var/cache/pkg/py311-duckdb-1.1.1.pkg
   /var/cache/pkg/py311-anyio-4.6.0~529d6455b9.pkg
   /var/cache/pkg/php82-ldap-8.2.24~62b21fe8db.pkg
   /var/cache/pkg/php82-sockets-8.2.24~8f1e0e31da.pkg
   /var/cache/pkg/opnsense-24.7.6.pkg
   /var/cache/pkg/php82-gettext-8.2.24.pkg
   /var/cache/pkg/php82-dom-8.2.24.pkg
   /var/cache/pkg/isc-dhcp44-server-4.4.3P1_2~95253b0add.pkg
   /var/cache/pkg/php82-pcntl-8.2.24.pkg
   /var/cache/pkg/php82-pdo-8.2.24~d6da193d1b.pkg
   /var/cache/pkg/py311-tzdata-2024.2.pkg
   /var/cache/pkg/php82-simplexml-8.2.24~2fab779dca.pkg
   /var/cache/pkg/php82-8.2.24.pkg
   /var/cache/pkg/php82-ctype-8.2.24~c15aae2ad7.pkg
   /var/cache/pkg/readline-8.2.13_1~691a94a030.pkg
   /var/cache/pkg/php82-sqlite3-8.2.24~170c780622.pkg
   /var/cache/pkg/boost-libs-1.85.0~12c935edc6.pkg
   /var/cache/pkg/json-c-0.18~2c79da768f.pkg
   /var/cache/pkg/py311-ldap3-2.9.1~329f63dbf6.pkg
   /var/cache/pkg/dhcp6c-20241008~aee36392b3.pkg
   /var/cache/pkg/vnstat-2.12.pkg
   /var/cache/pkg/easy-rsa-3.2.1_1,1.pkg
   /var/cache/pkg/readline-8.2.13_1.pkg
The cleanup will free 51 MiB
Deleting files: .......... done
All done
Nothing to do.
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-24.7.6-amd64.txz: ...

5

23.7 Legacy Series / Re: speedtest from cli

« on: October 09, 2024, 08:30:00 pm »

I mean the cli command to install

6

23.7 Legacy Series / Re: speedtest from cli

« on: October 07, 2024, 11:11:34 pm »

doesn't work for me

7

Hardware and Performance / Re: Advice

« on: September 29, 2024, 10:20:48 pm »

https://shop.opnsense.com/product/dec697-opnsense-desktop-security-appliance/

I think he has some other problem. its hardware has the computing power for what him ask.

8

Hardware and Performance / Re: Lower Fiber max speed than MikroTik device

« on: September 23, 2024, 02:40:48 pm »

ok , thanks
Sincerarly I've noticed no difference in maximum speed with or without tunables special settings

9

Hardware and Performance / Re: minimum hardware requirement for PPPoE 2.5gigabit fiber link

« on: September 23, 2024, 02:38:21 pm »

Now I'm using a miniPC with i5-8500t and I've seen 20/24% cpu laod on max download speedtest

I'm confident  the Futro will 'be sufficient. In any case I bought it to test a Vyos too.

10

General Discussion / Proxmox VM - net.isr.dispatch is necessary ?

« on: September 23, 2024, 02:34:06 pm »

Opnsense in a VM proxmox .2500/1000 fiber link in PPPoE
I'm curious to understand if it is required the folowing tunables settings:

net.isr.dispatch = deferred
net.isr.maxthreads = -1
net.isr.bindthreads = 1

thanks

11

Zenarmor (Sensei) / Re: Does OPNsense with IDS/IPS/Other takes full advantage of multi-core CPUs

« on: September 22, 2024, 09:46:49 pm »

but other opnsense functionality could use the multi thread cpu ?

12

Hardware and Performance / Re: minimum hardware requirement for PPPoE 2.5gigabit fiber link

« on: September 22, 2024, 05:28:41 pm »

I've jut found and bought the updated Futro S930 with AMD GX-424CC 4x 2,4 GHz .

I'll try with OPNsense.

13

Hardware and Performance / Re: Lower Fiber max speed than MikroTik device

« on: September 22, 2024, 05:24:03 pm »

I don' understand if your words are sarcastic . In any way I simply noticed the maximum download speed from web is 100 megabit lower than something seen with rb5009 router.

As I'm novice I ask you about the Tunables settings I've wrote .

thanks

14

Hardware and Performance / Re: minimum hardware requirement for PPPoE 2.5gigabit fiber link

« on: September 21, 2024, 08:53:06 pm »

I've found this on opnsense partner store :

DEC677
DEC677 – OPNsense® Desktop Security Appliance
A great performer with AMD G-Series SOC performance in a very small fanless enclosure.
This model includes 4GB DDR3 RAM, 32GB Solid State Flash and can handle upto 5000Mbps Firewall & 600Mbps IPsec throughput .

549.00 €


I've the opnsense on aminipc with i5-8500t and cpu max load is 20/25% when I try a speediest

15

Hardware and Performance / minimum hardware requirement for PPPoE 2.5gigabit fiber link

« on: September 21, 2024, 04:11:16 pm »

I've found a Fujitsu Futro S920 minipc with passive cooling and low hardware specs:

8GB mSATA SSD
4Gb ram
Cpu AMD GX-Series 415GA @ 1,5 GHz

I'll use a PCI intel i226 network card too.

Whant do you think about its cpu power to manage an high speed fiber pppoe link ?

thanks