Messages

I have this exact card on the latest firmware and I'm able to achieve this link speed with opnsense.   Are you running into issues?

are you able to negotiate link at 2.5 Gbps ?

did you find the fix to negotiate at 2.5 Gb ?

ok, thanks

I've chosen this card as this is only one could be fitted in my Lenovo tiny M920q  . The intel based card has different low profile bracket.

Do you know some intel based 4 Port NIC with separate IOMMU ?

Hi,
I've installed OPNSense on a box with 4 port Realtek Nic card .
On the same PVE node I've other VM images that should have connectivity to internet and my LAN.

I'd like to know if it is possible to use 1 port for wan and 2 port for LAN in passthrough.

Hi,
I read some trouble to use the intel x550-t2 card on linux based boxes at 2.5 Gbit link speed.

which is the situation now ?

thanks

So, I guess my question is this.   How reliable are Realtek chips in something like OPNSense these days?

I am planning on building an embedded system, and locating it remotely where it is inconvenient (but not impossible) to get at should it go unresponsive.

Meanwhile I am seeing some really attractive embedded industrial boards with dual Realtek 8111H ports on them.

  Or is it fine these days?

I'd appreciate any input.

ù

I've build a VM image with opnsense and I'm using a 4 port Realtek Nic card .For now I've not found any issue about it

I've a fiber link in PPPoE . My OPNsense router is DHCP server .

On every client in my lan network i can see in the nic settings the DNS field has the router IP address.

/ system/ settings / general / Allow DNS server list to be overridden by DHCP/PPP on WAN is checked .

At interfaces / overview / wan field / routes I can see my ISP Dns servers and google address . I've not set the google address .

Please help me to achieve the best configuration

thanks

Following what update process have done :
***GOT REQUEST TO UPDATE***
Currently running OPNsense 24.7.5_3 at Wed Oct  9 20:24:57 CEST 2024
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (116 candidates): .......... done
Processing candidates (116 candidates): .... done
The following 36 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   py311-ldap3: 2.9.1

Installed packages to be UPGRADED:
   boost-libs: 1.84.0 -> 1.85.0
   ca_root_nss: 3.93 -> 3.104
   curl: 8.10.0_1 -> 8.10.1
   dhcp6c: 20240919 -> 20241008
   easy-rsa: 3.2.1,1 -> 3.2.1_1,1
   isc-dhcp44-server: 4.4.3P1_1 -> 4.4.3P1_2
   json-c: 0.17 -> 0.18
   kea: 2.6.1 -> 2.6.1_1
   monit: 5.33.0_1 -> 5.34.1
   opnsense: 24.7.5_3 -> 24.7.6
   opnsense-update: 24.7.5 -> 24.7.6
   php82: 8.2.23 -> 8.2.24
   php82-ctype: 8.2.23 -> 8.2.24
   php82-curl: 8.2.23 -> 8.2.24
   php82-dom: 8.2.23 -> 8.2.24
   php82-filter: 8.2.23 -> 8.2.24
   php82-gettext: 8.2.23 -> 8.2.24
   php82-ldap: 8.2.23 -> 8.2.24
   php82-mbstring: 8.2.23 -> 8.2.24
   php82-pcntl: 8.2.23 -> 8.2.24
   php82-pdo: 8.2.23 -> 8.2.24
   php82-session: 8.2.23 -> 8.2.24
   php82-simplexml: 8.2.23 -> 8.2.24
   php82-sockets: 8.2.23 -> 8.2.24
   php82-sqlite3: 8.2.23 -> 8.2.24
   php82-xml: 8.2.23 -> 8.2.24
   php82-zlib: 8.2.23 -> 8.2.24
   py311-anyio: 4.4.0 -> 4.6.0
   py311-dnspython: 2.6.1,1 -> 2.7.0,1
   py311-duckdb: 1.0.0 -> 1.1.1
   py311-idna: 3.8 -> 3.10
   py311-tzdata: 2024.1 -> 2024.2
   readline: 8.2.13 -> 8.2.13_1
   suricata: 7.0.6_2 -> 7.0.7
   unbound: 1.21.0 -> 1.21.1

Number of packages to be installed: 1
Number of packages to be upgraded: 35

The process will require 12 MiB more space.
51 MiB to be downloaded.
[1/36] Fetching py311-anyio-4.6.0.pkg: .......... done
[2/36] Fetching unbound-1.21.1.pkg: .......... done
[3/36] Fetching php82-session-8.2.24.pkg: ..... done
[4/36] Fetching opnsense-update-24.7.6.pkg: ..... done
[5/36] Fetching monit-5.34.1.pkg: .......... done
[6/36] Fetching boost-libs-1.85.0.pkg: .......... done
[7/36] Fetching php82-zlib-8.2.24.pkg: ... done
[8/36] Fetching php82-dom-8.2.24.pkg: ......... done
[9/36] Fetching php82-simplexml-8.2.24.pkg: ... done
[10/36] Fetching json-c-0.18.pkg: ......... done
[11/36] Fetching easy-rsa-3.2.1_1,1.pkg: ....... done
[12/36] Fetching py311-idna-3.10.pkg: .......... done
[13/36] Fetching php82-pdo-8.2.24.pkg: ....... done
[14/36] Fetching php82-curl-8.2.24.pkg: ...... done
[15/36] Fetching dhcp6c-20241008.pkg: ......... done
[16/36] Fetching php82-mbstring-8.2.24.pkg: .......... done
[17/36] Fetching isc-dhcp44-server-4.4.3P1_2.pkg: .......... done
[18/36] Fetching php82-ldap-8.2.24.pkg: ..... done
[19/36] Fetching ca_root_nss-3.104.pkg: .......... done
[20/36] Fetching py311-dnspython-2.7.0,1.pkg: .......... done
[21/36] Fetching py311-ldap3-2.9.1.pkg: .......... done
[22/36] Fetching kea-2.6.1_1.pkg: .......... done
[23/36] Fetching py311-tzdata-2024.2.pkg: .......... done
[24/36] Fetching php82-sockets-8.2.24.pkg: ...... done
[25/36] Fetching php82-8.2.24.pkg: .......... done
[26/36] Fetching php82-sqlite3-8.2.24.pkg: .... done
[27/36] Fetching php82-pcntl-8.2.24.pkg: ... done
[28/36] Fetching php82-xml-8.2.24.pkg: ... done
[29/36] Fetching curl-8.10.1.pkg: .......... done
[30/36] Fetching suricata-7.0.7.pkg: .......... done
[31/36] Fetching php82-gettext-8.2.24.pkg: . done
[32/36] Fetching opnsense-24.7.6.pkg: .......... done
[33/36] Fetching py311-duckdb-1.1.1.pkg: .......... done
[34/36] Fetching readline-8.2.13_1.pkg: .......... done
[35/36] Fetching php82-ctype-8.2.24.pkg: . done
[36/36] Fetching php82-filter-8.2.24.pkg: ... done
Checking integrity... done (0 conflicting)
[1/36] Upgrading readline from 8.2.13 to 8.2.13_1...
[1/36] Extracting readline-8.2.13_1: .......... done
[2/36] Upgrading py311-idna from 3.8 to 3.10...
[2/36] Extracting py311-idna-3.10: .......... done
[3/36] Upgrading py311-anyio from 4.4.0 to 4.6.0...
[3/36] Extracting py311-anyio-4.6.0: .......... done
[4/36] Upgrading php82 from 8.2.23 to 8.2.24...
[4/36] Extracting php82-8.2.24: .......... done
[5/36] Upgrading php82-zlib from 8.2.23 to 8.2.24...
[5/36] Extracting php82-zlib-8.2.24: ........ done
[6/36] Upgrading py311-tzdata from 2024.1 to 2024.2...
[6/36] Extracting py311-tzdata-2024.2: .......... done
[7/36] Upgrading php82-xml from 8.2.23 to 8.2.24...
[7/36] Extracting php82-xml-8.2.24: ......... done
[8/36] Upgrading php82-session from 8.2.23 to 8.2.24...
[8/36] Extracting php82-session-8.2.24: .......... done
[9/36] Upgrading boost-libs from 1.84.0 to 1.85.0...
[9/36] Extracting boost-libs-1.85.0: .......... done
[10/36] Upgrading json-c from 0.17 to 0.18...
[10/36] Extracting json-c-0.18: .......... done
[11/36] Upgrading easy-rsa from 3.2.1,1 to 3.2.1_1,1...
[11/36] Extracting easy-rsa-3.2.1_1,1: .......... done
[12/36] Upgrading php82-pdo from 8.2.23 to 8.2.24...
[12/36] Extracting php82-pdo-8.2.24: .......... done
[13/36] Upgrading php82-mbstring from 8.2.23 to 8.2.24...
[13/36] Extracting php82-mbstring-8.2.24: .......... done
[14/36] Upgrading curl from 8.10.0_1 to 8.10.1...
[14/36] Extracting curl-8.10.1: .......... done
[15/36] Upgrading unbound from 1.21.0 to 1.21.1...
===> Creating groups
Using existing group 'unbound'
===> Creating users
Using existing user 'unbound'
[15/36] Extracting unbound-1.21.1: .......... done
[16/36] Upgrading opnsense-update from 24.7.5 to 24.7.6...
[16/36] Extracting opnsense-update-24.7.6: .......... done
[17/36] Upgrading monit from 5.33.0_1 to 5.34.1...
[17/36] Extracting monit-5.34.1: ....... done
[18/36] Upgrading php82-dom from 8.2.23 to 8.2.24...
[18/36] Extracting php82-dom-8.2.24: .......... done
[19/36] Upgrading php82-simplexml from 8.2.23 to 8.2.24...
[19/36] Extracting php82-simplexml-8.2.24: ......... done
[20/36] Upgrading php82-curl from 8.2.23 to 8.2.24...
[20/36] Extracting php82-curl-8.2.24: .......... done
[21/36] Upgrading dhcp6c from 20240919 to 20241008...
[21/36] Extracting dhcp6c-20241008: ........ done
[22/36] Upgrading isc-dhcp44-server from 4.4.3P1_1 to 4.4.3P1_2...
===> Creating groups
Using existing group 'dhcpd'
===> Creating users
Using existing user 'dhcpd'
[22/36] Extracting isc-dhcp44-server-4.4.3P1_2: .......... done
[23/36] Upgrading php82-ldap from 8.2.23 to 8.2.24...
[23/36] Extracting php82-ldap-8.2.24: ........ done
[24/36] Upgrading ca_root_nss from 3.93 to 3.104...
[24/36] Extracting ca_root_nss-3.104: ...... done
[25/36] Upgrading py311-dnspython from 2.6.1,1 to 2.7.0,1...
[25/36] Extracting py311-dnspython-2.7.0,1: .......... done
[26/36] Installing py311-ldap3-2.9.1...
[26/36] Extracting py311-ldap3-2.9.1: .......... done
[27/36] Upgrading kea from 2.6.1 to 2.6.1_1...
[27/36] Extracting kea-2.6.1_1: .......... done
[28/36] Upgrading php82-sockets from 8.2.23 to 8.2.24...
[28/36] Extracting php82-sockets-8.2.24: .......... done
[29/36] Upgrading php82-sqlite3 from 8.2.23 to 8.2.24...
[29/36] Extracting php82-sqlite3-8.2.24: ......... done
[30/36] Upgrading php82-pcntl from 8.2.23 to 8.2.24...
[30/36] Extracting php82-pcntl-8.2.24: ......... done
[31/36] Upgrading suricata from 7.0.6_2 to 7.0.7...
[31/36] Extracting suricata-7.0.7: .......... done
[32/36] Upgrading php82-gettext from 8.2.23 to 8.2.24...
[32/36] Extracting php82-gettext-8.2.24: ........ done
[33/36] Upgrading py311-duckdb from 1.0.0 to 1.1.1...
[33/36] Extracting py311-duckdb-1.1.1: .......... done
[34/36] Upgrading php82-ctype from 8.2.23 to 8.2.24...
[34/36] Extracting php82-ctype-8.2.24: ........ done
[35/36] Upgrading php82-filter from 8.2.23 to 8.2.24...
[35/36] Extracting php82-filter-8.2.24: ......... done
[36/36] Upgrading opnsense from 24.7.5_3 to 24.7.6...
[36/36] Extracting opnsense-24.7.6: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Migrated OPNsense\Trust\General from 0.0.0 to 1.0.1
Migrated OPNsense\Kea\KeaDhcpv4 from 1.0.0 to 1.0.1
Writing firmware settings: FreeBSD OPNsense
Writing trust files...done.
Traceback (most recent call last):
  File "/usr/local/opnsense/scripts/system/certctl.py", line 203, in <module>
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
    cmds[sys.argv[1]]()
  File "/usr/local/opnsense/scripts/system/certctl.py", line 160, in cmd_rehash
    os.symlink(src_filename, dst_filename)
FileNotFoundError: [Errno 2] No such file or directory: '/usr/share/certs/untrusted/thawte_Primary_Root_CA.pem' -> '/etc/ssl/blacklisted/2e4eed3c.0'
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring system logging...done.
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
You may need to manually remove /usr/local/openssl/cert.pem if it is no longer needed.
You may need to manually remove /usr/local/etc/kea/keactrl.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/classification.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/reference.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/suricata.yaml if it is no longer needed.
=====
Message from opnsense-24.7.6:

--
Rising up, back on the street...
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
   /var/cache/pkg/php82-zlib-8.2.24.pkg
   /var/cache/pkg/easy-rsa-3.2.1_1,1~2fb451b3f7.pkg
   /var/cache/pkg/py311-tzdata-2024.2~bb86035cc5.pkg
   /var/cache/pkg/opnsense-update-24.7.6~d42055dd7d.pkg
   /var/cache/pkg/php82-session-8.2.24.pkg
   /var/cache/pkg/py311-idna-3.10.pkg
   /var/cache/pkg/curl-8.10.1~ebbe318c92.pkg
   /var/cache/pkg/php82-pdo-8.2.24.pkg
   /var/cache/pkg/suricata-7.0.7.pkg
   /var/cache/pkg/php82-pcntl-8.2.24~5dffa04fd3.pkg
   /var/cache/pkg/py311-idna-3.10~938bade72d.pkg
   /var/cache/pkg/vnstat-2.12~e02da75052.pkg
   /var/cache/pkg/php82-sqlite3-8.2.24.pkg
   /var/cache/pkg/ca_root_nss-3.104.pkg
   /var/cache/pkg/php82-8.2.24~6167948aa6.pkg
   /var/cache/pkg/opnsense-24.7.6~ea1be4c656.pkg
   /var/cache/pkg/json-c-0.18.pkg
   /var/cache/pkg/php82-ldap-8.2.24.pkg
   /var/cache/pkg/curl-8.10.1.pkg
   /var/cache/pkg/isc-dhcp44-server-4.4.3P1_2.pkg
   /var/cache/pkg/php82-curl-8.2.24.pkg
   /var/cache/pkg/unbound-1.21.1~f666789069.pkg
   /var/cache/pkg/php82-simplexml-8.2.24.pkg
   /var/cache/pkg/py311-ldap3-2.9.1.pkg
   /var/cache/pkg/dhcp6c-20241008.pkg
   /var/cache/pkg/php82-gettext-8.2.24~cd1409f9f1.pkg
   /var/cache/pkg/php82-zlib-8.2.24~491a16b555.pkg
   /var/cache/pkg/php82-filter-8.2.24~51fe33eca8.pkg
   /var/cache/pkg/os-vnstat-1.3_1~67ff3b1f30.pkg
   /var/cache/pkg/php82-ctype-8.2.24.pkg
   /var/cache/pkg/unbound-1.21.1.pkg
   /var/cache/pkg/suricata-7.0.7~ffa1fe90b2.pkg
   /var/cache/pkg/os-vnstat-1.3_1.pkg
   /var/cache/pkg/php82-filter-8.2.24.pkg
   /var/cache/pkg/monit-5.34.1.pkg
   /var/cache/pkg/kea-2.6.1_1~279496f3a2.pkg
   /var/cache/pkg/php82-mbstring-8.2.24.pkg
   /var/cache/pkg/py311-anyio-4.6.0.pkg
   /var/cache/pkg/monit-5.34.1~2038019ce7.pkg
   /var/cache/pkg/ca_root_nss-3.104~7d77a5b4ff.pkg
   /var/cache/pkg/py311-dnspython-2.7.0,1~fe3305640b.pkg
   /var/cache/pkg/php82-session-8.2.24~8903525d57.pkg
   /var/cache/pkg/kea-2.6.1_1.pkg
   /var/cache/pkg/php82-sockets-8.2.24.pkg
   /var/cache/pkg/php82-xml-8.2.24.pkg
   /var/cache/pkg/opnsense-update-24.7.6.pkg
   /var/cache/pkg/py311-dnspython-2.7.0,1.pkg
   /var/cache/pkg/py311-duckdb-1.1.1~bc674435a7.pkg
   /var/cache/pkg/php82-mbstring-8.2.24~b0345a14a7.pkg
   /var/cache/pkg/boost-libs-1.85.0.pkg
   /var/cache/pkg/php82-xml-8.2.24~940e311c3c.pkg
   /var/cache/pkg/php82-curl-8.2.24~31163cafd0.pkg
   /var/cache/pkg/php82-dom-8.2.24~14856ee47d.pkg
   /var/cache/pkg/py311-duckdb-1.1.1.pkg
   /var/cache/pkg/py311-anyio-4.6.0~529d6455b9.pkg
   /var/cache/pkg/php82-ldap-8.2.24~62b21fe8db.pkg
   /var/cache/pkg/php82-sockets-8.2.24~8f1e0e31da.pkg
   /var/cache/pkg/opnsense-24.7.6.pkg
   /var/cache/pkg/php82-gettext-8.2.24.pkg
   /var/cache/pkg/php82-dom-8.2.24.pkg
   /var/cache/pkg/isc-dhcp44-server-4.4.3P1_2~95253b0add.pkg
   /var/cache/pkg/php82-pcntl-8.2.24.pkg
   /var/cache/pkg/php82-pdo-8.2.24~d6da193d1b.pkg
   /var/cache/pkg/py311-tzdata-2024.2.pkg
   /var/cache/pkg/php82-simplexml-8.2.24~2fab779dca.pkg
   /var/cache/pkg/php82-8.2.24.pkg
   /var/cache/pkg/php82-ctype-8.2.24~c15aae2ad7.pkg
   /var/cache/pkg/readline-8.2.13_1~691a94a030.pkg
   /var/cache/pkg/php82-sqlite3-8.2.24~170c780622.pkg
   /var/cache/pkg/boost-libs-1.85.0~12c935edc6.pkg
   /var/cache/pkg/json-c-0.18~2c79da768f.pkg
   /var/cache/pkg/py311-ldap3-2.9.1~329f63dbf6.pkg
   /var/cache/pkg/dhcp6c-20241008~aee36392b3.pkg
   /var/cache/pkg/vnstat-2.12.pkg
   /var/cache/pkg/easy-rsa-3.2.1_1,1.pkg
   /var/cache/pkg/readline-8.2.13_1.pkg
The cleanup will free 51 MiB
Deleting files: .......... done
All done
Nothing to do.
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-24.7.6-amd64.txz: ...

I mean the cli command to install

doesn't work for me

https://shop.opnsense.com/product/dec697-opnsense-desktop-security-appliance/

I think he has some other problem. its hardware has the computing power for what him ask.

ok , thanks
Sincerarly I've noticed no difference in maximum speed with or without tunables special settings

Now I'm using a miniPC with i5-8500t and I've seen 20/24% cpu laod on max download speedtest

I'm confident  the Futro will 'be sufficient. In any case I bought it to test a Vyos too.

Opnsense in a VM proxmox .2500/1000 fiber link in PPPoE
I'm curious to understand if it is required the folowing tunables settings:

net.isr.dispatch = deferred
net.isr.maxthreads = -1
net.isr.bindthreads = 1

thanks

but other opnsense functionality could use the multi thread cpu ?