Messages

1

Tutorials and FAQs / Re: HOWTO - Redirect all DNS Requests to Opnsense

« on: November 05, 2024, 02:47:58 pm »

I tried the different methods from this thread to redirect everything to my pihole with cloudflare upstream dns.

When I change the DNS server of my computer to 8.8.8.8 and go to https://www.dnsleaktest.com/ and start a test, it then shows a bunch of google servers, so it doesn't seem to work. Or is my understanding wrong?

In another thread (https://forum.opnsense.org/index.php?topic=15472.0) it is mentioned to create an outbound NAT translation. I haven't read that anywhere else. So is this needed?

Wondering this same question. Followed the guide but when I change my DNS server on my Iphone to 8.8.8.8 and run a dnsleaktest I can see the Google servers where I had expected my local unbound service?

All working now.. after setting it up again! Even when using 8.8.8.8 I can see the dns used is my local DNS service!

2

Tutorials and FAQs / Re: HOWTO - Redirect all DNS Requests to Opnsense

« on: November 05, 2024, 10:33:07 am »

I tried the different methods from this thread to redirect everything to my pihole with cloudflare upstream dns.

When I change the DNS server of my computer to 8.8.8.8 and go to https://www.dnsleaktest.com/ and start a test, it then shows a bunch of google servers, so it doesn't seem to work. Or is my understanding wrong?

In another thread (https://forum.opnsense.org/index.php?topic=15472.0) it is mentioned to create an outbound NAT translation. I haven't read that anywhere else. So is this needed?

Wondering this same question. Followed the guide but when I change my DNS server on my Iphone to 8.8.8.8 and run a dnsleaktest I can see the Google servers where I had expected my local unbound service?

3

Hardware and Performance / Performance guide question

« on: October 22, 2024, 05:32:40 pm »

Hi all,

For my system I followed this guide;

https://docs.opnsense.org/troubleshooting/performance.html

But there is one thing of which I am not sure what value to use.

net.inet.rss.bits = X
This one is dependent on the amount of cores you have. By default the amount of bits here represent the amount of cores x 2 in binary. This is done on purpose to provide load-balancing, though there is no current implementation for this so we recommend setting this value to the amount of bits representing the number of CPU cores. This means we use the following values:

for 4-core systems, use ‘2’
for 8-core systems, use ‘3’
for 16-core systems, use ‘4’
Etc.

I have a 6 core Intel 9500T and don’t know if I should use 2 or 3 now.

Any ideas? Thanks!

4

Hardware and Performance / Re: minimum hardware requirement for PPPoE 2.5gigabit fiber link

« on: September 22, 2024, 10:25:15 pm »

PPPoE relies on single core performance.
I think this processor won’t be enough for 2.5gb.

Better check a cpu for single core performance on cpubenchmark.net and get one with a high rating. You can compare with the n100 f.e.

5

Hardware and Performance / Re: Barebone Intel N100 with 4 x I226

« on: September 21, 2024, 12:46:09 pm »

One can enable a temperature widget on the dashboard.

However:

1. At this time, it shows the temperature as too high, because it itself raises the momentary CPU temperatures during the dashboard updates.

2. You probably cannot use it, because your OpnSense is virtualized.

That is what I did, and the widget is making me paranoid showing temps around 59/60 degrees idle…
But, checking temps from the console they are like 40 degrees…

So I felt the case, but it does indeed feels pretty hot, hard to say how hot, but I think the hottest hardware in my house haha

Edit: I plugged in a power measurement plug and it is idling @ 13.2W running a Speedtest will boost it to 16.7W

6

23.7 Legacy Series / Re: CPU temp reporting

« on: September 19, 2024, 11:53:40 am »

Bumping this old thread because I see the same behavior!

7

Hardware and Performance / Re: Upload speed dropping on Netgate SG5100 with FQ Codel enabled

« on: September 19, 2024, 11:34:51 am »

I will try that!

I am using a PPPoE connection which requires a Vlan tag 6 for internet.
My MTU is set @ 1508 so the calculated PPP MTU is 1500.

8

Hardware and Performance / Re: Upload speed dropping on Netgate SG5100 with FQ Codel enabled

« on: September 19, 2024, 11:18:41 am »

Is ti possible you have set the "limit" other than the default?

Regards,
S.

Nope, didn't touch the limit to get a good baseline. Wanted to tune later on, but this strange behavior is holding me back..

9

Hardware and Performance / Re: Barebone Intel N100 with 4 x I226

« on: September 19, 2024, 08:16:57 am »

Hmm I am very curious about your BIOS settings now.

If I do a simple Speedtest (with shaper enabled) I can see all my cores go from around 800mhz to 2900mhz.
I checked this using HTOP with cpu frequency and temperature enabled..

A real stress test like prime or something I didn’t do yet, not sure if there is a bootable version or something to do that because I don’t run windows on this machine

10

Hardware and Performance / Re: Barebone Intel N100 with 4 x I226

« on: September 18, 2024, 10:50:37 pm »

Nice!
Strange thing I noticed is that when I stress the system with a bufferbloat test for example I see the cores go to 2999Mhz (3ghz), but the boost to 3,4ghz is never reached.

Is this normal behavior or did I do something wrong in my bios config which turned off the boost?

11

Hardware and Performance / Re: Upload speed dropping on Netgate SG5100 with FQ Codel enabled

« on: September 18, 2024, 10:39:21 pm »

Got the same behavior after configuring it on my new N100 build..
Just configured everything following this guide:

https://docs.opnsense.org/manual/how-tos/shaper_bufferbloat.html

Didn’t apply any tweaks or optimization.. but as soon as it is enabled @ 850/850 which is 85% of my 1Gb connection the download is holding nicely @ +-819mbit but upload drops to 750mbit after starting @ +-819mbit like the download speed…

Disabling shaper and both up and download reach 930mbit again…
Can’t remember this on older builds, could it be a bug??

12

Zenarmor (Sensei) / New to Zenarmor, what is next

« on: September 18, 2024, 10:32:17 pm »

Hi all,

I just finished installing Zenarmor/elastic8 local/native driver with a free license.
Everything is up and running now listening to my lan interface.

So, what is next?
I am a bit confused what to configure next, or is everything (for a simple home setup) enabled out of the box?
I can see some nice reports being generated

13

Hardware and Performance / Re: Barebone Intel N100 with 4 x I226

« on: September 18, 2024, 10:11:18 pm »

Oke, I am up and running with 16gb ram and a 256gb 2.5” SSD.
Running bare metal with ZenArmor, Shaper, Adblock, 1Gb up and down PPPoE including IPTV.

Eveything is working great, but I am a bit concerned about the temperature.
I applied new/better thermal paste, did some bios tweaks but OPNsens is reporting quite high temperatures running idle..

If I touch it, it also feels quite hot so the case is touching the CPU correctly I guess..

14

Hardware and Performance / Re: Barebone Intel N100 with 4 x I226

« on: September 18, 2024, 04:54:58 pm »

Yes, SATA SSDs will be lower in temperature.

And you can/should tweak the CPU TDP settings in the BIOS.

Do you have any directions or a guide for the BIOS settings? Thanks!

15

Hardware and Performance / Re: Barebone Intel N100 with 4 x I226

« on: September 18, 2024, 12:21:13 pm »

Thanks! Are there also some opnsense tweaks/tunables needed?