Messages

Nice!
Currently I run mdns repeater and ssdpreflector between my lan and iot vlan.

If I am correct I can drop these packages for this single package? :D

It would seem so, yes. Let me know if you need help with the configuration. If you will want to enable dial - you will probably require some firewall adjustments (for input chain to accept DIAL responses from IOT VLAN). If everything works for you now though - you will probably only need mdns and ssdp set to true. Dial is for things like my stupid LG TV that does not accept DIAL connections from other networks even after successful SSDP discovery.

Nice! Will give it a try later today!
About Dial, I do have a LG TV in my IoT vlan so maybe I should implement it correctly. Never noticed an issue, but I only have my network setup like this, with iot and iptv vlans for a week now haha. Could you give me some directions about the firewall changes for dial? :D

Main reason I use MDNS and SSDP are my chromecasts and wireless sonos speakers which both are in IoT vlan!

Nice!
Currently I run mdns repeater and ssdpreflector between my lan and iot vlan.

If I am correct I can drop these packages for this single package? :D

But enabling speedstep would also require enable powerd in Opnsense right?

I did some testing but with or without speedstep, device idles always @ 19w. So don't think it makes much of a difference and I am better of disabling it

Hi all,

I've just setup a new system based on a Intel Atom C3558.

When I was going trough the bios I saw that by default EIST (Enhanced Intel Speedstep) was disabled and the same for ASPM.

Now I was wondering if I should enable it and also enable PowerD in Opnsense after that? Or should I just leave both disabled? Enabling only powerd without EIST wouldnt do much I think?

Hi,

This problem exists for a very long time now and would like to know if there are any solutions?

I use igmp proxy for my IPTV configuration which goes over my lan to my switch on a separate VLAN.

The switch is the only device connected to my Opnsense box. When I reboot my switch the link is detected as down and the igmp proxy service stops. The only solution than is to manually start it from the interface again which is kinda annoying.

A Lenovo M920q is about $140.  Add the PCIE16 Riser Card 01AJ940 with baffle for $35 and attach that to a Intel i350-t2 or t4 and you'll have something much better and dependable than those Aliexpress boxes in my opinion.


https://forums.servethehome.com/index.php?threads/lenovo-thinkcentre-thinkstation-tiny-project-tinyminimicro-reference-thread.34925/

Exactly this! Been Using a m720q with a 9100T, 16gb ram and Intel i350-AM2 SFP card directly connected to my AON and it has been rock solid!
Consumption is 11w idle which is almost the same as those n100 boxes which most of them have non optimized BIOS or even are unable to tweak them because of pore architecture...

Intel 9100T: 35WTDP
Intel 8500T: 35W TDP
Intel N100: 6W TDP

I use a Beelink EQ12 as router at the moment.

TDP has nothing to do with idle power consumption, just the max it can pull.
I get a 11w idle with the whole machine up and running and a 9100t, the n100 will not do much better in those boxes despite it's 6w TDP ;)

A Lenovo M920q is about $140.  Add the PCIE16 Riser Card 01AJ940 with baffle for $35 and attach that to a Intel i350-t2 or t4 and you'll have something much better and dependable than those Aliexpress boxes in my opinion.


https://forums.servethehome.com/index.php?threads/lenovo-thinkcentre-thinkstation-tiny-project-tinyminimicro-reference-thread.34925/

Exactly this! Been Using a m720q with a 9100T, 16gb ram and Intel i350-AM2 SFP card directly connected to my AON and it has been rock solid!
Consumption is 11w idle which is almost the same as those n100 boxes which most of them have non optimized BIOS or even are unable to tweak them because of pore architecture...

I tried the different methods from this thread to redirect everything to my pihole with cloudflare upstream dns.

When I change the DNS server of my computer to 8.8.8.8 and go to https://www.dnsleaktest.com/ and start a test, it then shows a bunch of google servers, so it doesn't seem to work. Or is my understanding wrong?

In another thread (https://forum.opnsense.org/index.php?topic=15472.0) it is mentioned to create an outbound NAT translation. I haven't read that anywhere else. So is this needed?

Wondering this same question. Followed the guide but when I change my DNS server on my Iphone to 8.8.8.8 and run a dnsleaktest I can see the Google servers where I had expected my local unbound service?

All working now.. after setting it up again! Even when using 8.8.8.8 I can see the dns used is my local DNS service! :)

I tried the different methods from this thread to redirect everything to my pihole with cloudflare upstream dns.

When I change the DNS server of my computer to 8.8.8.8 and go to https://www.dnsleaktest.com/ and start a test, it then shows a bunch of google servers, so it doesn't seem to work. Or is my understanding wrong?

In another thread (https://forum.opnsense.org/index.php?topic=15472.0) it is mentioned to create an outbound NAT translation. I haven't read that anywhere else. So is this needed?

Wondering this same question. Followed the guide but when I change my DNS server on my Iphone to 8.8.8.8 and run a dnsleaktest I can see the Google servers where I had expected my local unbound service?

Hi all,

For my system I followed this guide;

https://docs.opnsense.org/troubleshooting/performance.html

But there is one thing of which I am not sure what value to use.

net.inet.rss.bits = X
This one is dependent on the amount of cores you have. By default the amount of bits here represent the amount of cores x 2 in binary. This is done on purpose to provide load-balancing, though there is no current implementation for this so we recommend setting this value to the amount of bits representing the number of CPU cores. This means we use the following values:

for 4-core systems, use '2'
for 8-core systems, use '3'
for 16-core systems, use '4'
Etc.

I have a 6 core Intel 9500T and don't know if I should use 2 or 3 now.

Any ideas? Thanks!

PPPoE relies on single core performance.
I think this processor won't be enough for 2.5gb.

Better check a cpu for single core performance on cpubenchmark.net and get one with a high rating. You can compare with the n100 f.e.

One can enable a temperature widget on the dashboard.

However:

1. At this time, it shows the temperature as too high, because it itself raises the momentary CPU temperatures during the dashboard updates.

2. You probably cannot use it, because your OpnSense is virtualized.

That is what I did, and the widget is making me paranoid showing temps around 59/60 degrees idle...
But, checking temps from the console they are like 40 degrees...

So I felt the case, but it does indeed feels pretty hot, hard to say how hot, but I think the hottest hardware in my house haha

Edit: I plugged in a power measurement plug and it is idling @ 13.2W running a Speedtest will boost it to 16.7W

Bumping this old thread because I see the same behavior!

I will try that!

I am using a PPPoE connection which requires a Vlan tag 6 for internet.
My MTU is set @ 1508 so the calculated PPP MTU is 1500.

Is ti possible you have set the "limit" other than the default?

Regards,
S.

Nope, didn't touch the limit to get a good baseline. Wanted to tune later on, but this strange behavior is holding me back..