Messages

I am looking to do a HA setup
Master will be a Proxmox VM
Secondary will be a physical Sophos XG450 appliance

Do I understand right, because the interfaces on each machine will probably be named different,
high availability wont work?

Ok, I am clearly an idiot
I am setting up OPNsense
I need a driver for my NIC
When I use the fetch command, I get a 404 error
When i go directly to the website I also get a 404 error
I have tried other links around the net for older versions, still get the same error

https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/Hashed/aquantia-atlantic-kmod-0.0.5.1403000_3~edd0755de0.pkg

https://www.freshports.org/net/aquantia-atlantic-kmod/ shows releases

How do I download this bloody thing to get my firewall working

SO i would use my paid sub on the master, adn the free on the backup?

Hello
I am looking to do a HA setup. I am a paid sub of the zenarmor home plan. What is the best way to deploy in this situation, since HA is only available in the business edition, which is way too much money for home use.

Hi
Thanks for your response. Yes the sophos appliance. If I power it off for a few minutes, pppoe speeds resume. A few reboots in a row has also worked for both OPN and Sophos OS

Yes the LAN always works at full 10GBE speeds throughout. Which is also using the same type of sfp+ to rj45
I will see if I have a spare sfp I can try

Looking for some advice from you IT hardware professionals and labbers
I am having issues with WAN speeds after a few weeks, it slows to under 1Gbps
ISP Modem built in speed test shows full allocated speeds of 8Gbps up and down
Yes, I have rebooted modem anyways, just to be sure
Zero info in logs. Speed test from CLI also confirms less than 1Gbps speeds
All links remain showing at 10gbe
If appliance is powered down for 5 minutes or so, full PPPOE speeds return
Sometimes a few reboots in a row will also fix the issue
so, I switched back to SOPHOS OS for the Sophos appliance, thinking maybe a FREEBSD driver issue?
However, its now happened running this OS, which is Linux based.
Complete network info below my post

I am thinking maybe the SFP+ to RJ45 module could be the issue, but, would that make sense? Do these things just sorta kinda work, but not fully work? The SFP module is hot, but I have been told that's normal for these types of SFPs.

The only other thing I can think of, is the SFP port on the appliance itself is the issue, but, if it was, I would assume link speeds would change or at least something showing up in logs, of at least its maker, SOPHOS. Nothing ever seen.

INFO BELOW
Appliance: SOPHOS XG450
ISP: Bell Canada
Speed profile: 8Gbps symmetrical
Connected to 10Gbps ISP modem WAN port via RJ45 to SFP+ converter in top SFP+ slot of Sophos appliance
LAN connected by SFP+ to RJ45 module to 10Gbps Unifi switch
10Gbe switch to 1st floor 10gbe dumb switch, connected at 10Gbps to a Asus BT10 wifi system
2nd floor wired from 1st floor 10gbe ASUS BT10 WIFI.
Full 10gbe speeds throughout the LAN from any 10gbe capable device

Any thoughts would be greatly appreciated. i would like to switch back to OPNSense, but I gotta figure this out

And finally, some log snippets to see. You can see wanGW making changes
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: Chose to bind WAN_GW on 70.50.43.217 since we could not find a proper match.
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: Chose to bind WAN_GW on 70.50.43.217 since we could not find a proper match.
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: plugins_configure monitor (execute task : dpinger_configure_do(,[WAN_GW]))
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: plugins_configure monitor (,[WAN_GW])
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: keeping inet default route to 142.124.37.248
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: configuring inet default gateway on wan
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: ignoring down gateways: ROGERS_DHCP6
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: treating '142.124.37.248' as far gateway for '70.50.43.217/32'
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: plugins_configure monitor (execute task : dpinger_configure_do(,[WAN_GW]))
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: plugins_configure monitor (,[WAN_GW])
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: keeping inet default route to 142.124.37.248
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: configuring inet default gateway on wan
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: ignoring down gateways: ROGERS_DHCP6
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: treating '142.124.37.248' as far gateway for '70.50.43.217/32'
2025-11-05T12:04:46-05:00   Notice   opnsense    /usr/local/etc/rc.newwanip: plugins_configure newwanip (execute task : wireguard_sync())
2025-11-05T12:04:46-05:00   Notice   opnsense    /usr/local/etc/rc.newwanip: plugins_configure newwanip (execute task : webgui_configure_do(,[wan]))
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: entering configure using wan
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: plugins_configure newwanip:rfc2136 (,[wan])
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: ROUTING: entering configure using wan
2025-11-05T12:04:46-05:00   Notice   opnsense    /interfaces.php: plugins_configure newwanip:rfc2136 (,[wan])
2025-11-05T12:04:45-05:00   Notice   opnsense    /usr/local/etc/rc.newwanip: plugins_configure newwanip (execute task : vxlan_configure_do())
2025-11-05T12:04:45-05:00   Warning   opnsense    /interfaces.php: warning: ignoring missing default tunable request: hw.ibrs_disable
2025-11-05T12:04:45-05:00   Warning   opnsense    /interfaces.php: warning: ignoring missing default tunable request: vm.pmap.pti
2025-11-05T12:04:45-05:00   Warning   opnsense    /interfaces.php: warning: ignoring missing default tunable request: hw.ibrs_disable
2025-11-05T12:04:45-05:00   Warning   opnsense    /interfaces.php: warning: ignoring missing default tunable request: vm.pmap.pti
2025-11-05T12:04:45-05:00   Warning   opnsense    /usr/local/etc/rc.newwanip: warning: ignoring missing default tunable request: hw.ibrs_disable
2025-11-05T12:04:45-05:00   Warning   opnsense    /usr/local/etc/rc.newwanip: warning: ignoring missing default tunable request: vm.pmap.pti
2025-11-05T12:04:45-05:00   Error   opnsense    /interfaces.php: The command '/bin/kill -'TERM' '53758''(pid:/var/run/unbound.pid)  returned exit code '1', the ou

more screens

So I do not know if my failover setup is causing this, or what. I have attached screenshots of the various settings. I am not worried about the IP's being exposed

Since the latest update, the GUI is showing the wrong IP. Most devices get the right ip.. switching to dec doesn't solve it.

Wangw not reports so iop from somewhere instead of my pppoe IP.

new install of opnsense. All my devices are connecting except just one. A fire stick in my bedroom. Amazon just reports no internet access.

If I switch over to sophos VM or my old mikrotik router, it works fine.

I have forgot the wifi network. Added again. Rebooted the fire stick. Rebooted the unifi AP and switch. All no go. Everything else on the switch and AP works fine.

Nothing seems to jump out in the opnsense interface. Any suggestions?

I also posted on reddit. hoping for something else to try.