Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - mgrue

#1
General Discussion / Connection / State Monitoring
February 02, 2021, 11:38:49 AM
Hi everybody,

I have an important TCP/IP connection that runs through my opnsense 21.1 installation.
It is an IoT use case (Smartmeter Gateway sending telemetry data back to a Smartmeter Gateway operator).

The connection is from a fixed IP address in my network to a fixed IP address and Port (443) in the operator's datacenter.

What I would like to achieve in terms of monitoring:
- check whether there is exactly one established connection state between those IP addresses with Target Port 443
- check how much data per timespan has been send through the connection since it has been established
- see the point in time or duration since the connection has been established

I can find the desired information using pftop or the 'Inspect' button in the firewall rules menu. Ideally I could get this information out using the Telegraf plugin, but unfortunately is this kind of data not covered by the 'pf' input plugin of Telegraf. Any ideas how I can implement a connection state monitoring?

Thanks,
Martin
#2
20.7 Legacy Series / opnsense freezes and needs reboot
August 18, 2020, 09:14:34 AM
I have the following setup:
- opnsense 20.1 running for months without any problem in a VMware vSphere (ESXi 6.7) VM
- Rather plain config without IDS/IPS or any special addons (Plugins os-net-snmp, os-vmware, os-dyndns)
- VM has 2 vCPUs / 1 GB RAM / 9 vNICs (VMXNET 3) / VMware Tools installed
- Average load 0.4 / Between 30-40% Memory utilisation after boot
- WAN connection is PPPoE with 175 Mb down / 40 Mb up (IPv4/IPv6)

Now I upgraded to 20.7 and subsequently to 20.7.1. The problem is that the system stops forwarding packets after 24 to 72 hours. When thise 'freeze' happens the symptoms are as following:
- No packets forwarded at all
- WebUI or SSH login not possible
- Only chance is to use the VMware console to go the command line interface
- 'Restart all services' does rarely help
- Typically a reboot helps
- in some cases the WAN connection is reporting packet loss and long round trip times after reboot,
  the only chance to heal that issue is another reboot (sometimes two times in a row)
- No log entries that would indicate a problem to me

I cannot see the root of the problems. Therefore I have no clue what I can do. Any help is highly appreciated.

P.S.: As a temporary mitigation I will setup a cron-based nightly reboot.

Thanks,
Martin