Topics

1

Web Proxy Filtering and Caching / [SOLVED] HAproxy suddenly stopped working!!

« on: November 28, 2024, 12:48:18 pm »

For the life of me I cannot get around this...

OUT OF THE BLUE, HAproxy simply stopped working and all my services are unaccessible now.

I haven't changed my configuration for the last 2 years at least and just like that, this morning, it stopped redirecting traffic.

What makes it even more bizzarre is that the only URL that accepts is the one that takes to OPNsense itself.

After having checked the entire configuration from ZERO, I'm at a dead end. Any ideas?

2

Zenarmor (Sensei) / Netmap 10G

« on: June 24, 2024, 06:51:05 pm »

Hello,

I've been running Zenarmor on my DEC3840 for a while and just recently I've upgraded to a 10G/10G p2p INET connection. Zenarmor is monitoring my AX1 and I wonder whether it supports Native Netmap as I'm seeing a growing number of errors (OUT) on all VLANs as reported onto the INTERFACE STATISTICS widget.

I hadn't notice any errors when Zenarmor was monitoring igbx ports.

Any suggestion?

3

Hardware and Performance / DEC3840 - RAM UPGRADE

« on: June 20, 2024, 04:36:00 pm »

Hello,

I'd like to upgrade my appliance from the current 8G to either 16G or 32G but I'm struggling to find a list of supported compatible modules.

Can you guys point me in the right direction for finding such a list?

Thanks!

4

Hardware and Performance / DEC3840 - RAM SPEED

« on: June 20, 2024, 04:34:32 pm »

Hello,

Having run a dmidecode dump, I've noticed that my RAM is running at half its speed. (please see below)
Any ideas why and how to set it to the right speed (2666)?

Code: [Select]

Handle 0x0024, DMI type 17, 40 bytes
Memory Device
Array Handle: 0x0022
Error Information Handle: 0x0027
Total Width: 64 bits
Data Width: 64 bits
Size: 8 GB
Form Factor: DIMM
Set: None
Locator: DIMM 0
Bank Locator: P0 CHANNEL B
Type: DDR4
Type Detail: Synchronous Unbuffered (Unregistered)
Speed: 1333 MT/s
Manufacturer: Unknown
Serial Number: 00000866
Asset Tag: Not Specified
Part Number: TS1GLH64V6B3       
Rank: 1
Configured Memory Speed: 1333 MT/s
Minimum Voltage: 1.2 V
Maximum Voltage: 1.2 V
Configured Voltage: 1.2 V

Thanks!

5

Hardware and Performance / DEC3840 - High Temperature

« on: June 20, 2024, 03:31:14 pm »

Hello,

My DEC3840 is running at a very high temperature (in my opinion) of about 65/67C.
What's the regular operating temperature for this device?

Just yesterday it stopped working, I had to shut it down and let it cool for a while, then rebooted and started functioning again. Now temp sits at around 60C.

Can anyone assist? @franco?

6

23.7 Legacy Series / DEC 3840 - bizarre behavior 10G

« on: December 08, 2023, 04:09:03 pm »

Hello,

I've upgraded my ISP to 10G symmetric and configured my DEC3840 at such.
Bizarrely enough, 10G clients are getting full speed, 1G clients are getting ~300M Download / 940M Upload.

Here's my topology:

ISP--10G-->DEC3840--10G-->Meraki MS125-24P-->Clients (10G, 2.5G, 1G)

Any clue anyone?

7

Hardware and Performance / DEC3840 - SFP+ RJ45 Module

« on: December 08, 2023, 01:27:40 pm »

Hello,

What FS.COM module is compatible the most with the Deciso DEC3840, Broadcom or Marvell?

https://www.fs.com/de-en/products/74680.html?attribute=27&id=3350408
OR
https://www.fs.com/de-en/products/111924.html?attribute=26184&id=479666

Also, shall I select GENERIC, FS or what else as for compatibility?

Thanks!!

8

23.7 Legacy Series / 23.7.7 -> WAN 0.0.0.0 after reboot

« on: October 25, 2023, 06:52:46 pm »

I’m lost…

Installation went smoothly as usual…then reboot and BOOM no more internet.
Tried rebooting modem 3x no luck
Tried rebooting OPNsense 3x no luck
Change WAN interface no luck

I’m running out of ideas and kids want to kill me.

Help!!!

9

Hardware and Performance / DEC3840 - fan replacement

« on: June 09, 2023, 08:30:15 am »

Hello,

I’d like to swap my dec3840 fan with noctua’s as the noise is driving me crazy…
Anyone can give me specs for ordering the right one?

I’m looking for dimensions, voltage, number of pins etc.

Any help is highly appreciated. Also, my FW runs at ~50°C, at what temperature yours are running?

Cheers!!

NW4FUN

10

23.1 Legacy Series / Regular Crashes....

« on: May 05, 2023, 05:06:04 pm »

I've filed a stupid amount of time (daily over the last 2 months) the below crash report and never got an answer.

Do you guys have any idea what's going on with my DEC3840??




Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 08
fault virtual address   = 0x0
fault code      = supervisor write data, page not present
instruction pointer   = 0x20:0xffffffff80de1e0c
stack pointer           = 0x28:0xfffffe00107c7d10
frame pointer           = 0x28:0xfffffe00107c7e00
code segment      = base 0x0, limit 0xfffff, type 0x1b
         = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags   = interrupt enabled, resume, IOPL = 0
current process      = 0 (if_io_tqg_2)
trap number      = 12
panic: page fault
cpuid = 2
time = 1683248715
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00107c7ad0
vpanic() at vpanic+0x17f/frame 0xfffffe00107c7b20
panic() at panic+0x43/frame 0xfffffe00107c7b80
trap_fatal() at trap_fatal+0x385/frame 0xfffffe00107c7be0
trap_pfault() at trap_pfault+0x4f/frame 0xfffffe00107c7c40
calltrap() at calltrap+0x8/frame 0xfffffe00107c7c40
--- trap 0xc, rip = 0xffffffff80de1e0c, rsp = 0xfffffe00107c7d10, rbp = 0xfffffe00107c7e00 ---
iflib_rxeof() at iflib_rxeof+0x52c/frame 0xfffffe00107c7e00
_task_fn_rx() at _task_fn_rx+0x72/frame 0xfffffe00107c7e40
gtaskqueue_run_locked() at gtaskqueue_run_locked+0x15d/frame 0xfffffe00107c7ec0
gtaskqueue_thread_loop() at gtaskqueue_thread_loop+0xc2/frame 0xfffffe00107c7ef0
fork_exit() at fork_exit+0x7e/frame 0xfffffe00107c7f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00107c7f30
--- trap 0x8038b000, rip = 0xffffffff80c311df, rsp = 0, rbp = 0x6 ---
mi_startup() at mi_startup+0xdf/frame 0x6
KDB: enter: panic
panic.txt0600001214425053113  7127 ustarrootwheelpage faultversion.txt0600007414425053113  7532 ustarrootwheelFreeBSD 13.1-RELEASE-p7 stable/23.1-n250430-7eb6eb035df SMP

11

23.1 Legacy Series / 10G WAN - Poor performance DEC3840

« on: March 22, 2023, 11:13:26 am »

Hello,

I've just upgraded my INET to 10G and as a result throughput has been negatively impacted. Let me explain:

INET->DEC3840->10G DAC into MS125p switch

On 1G WAN (igb0), I used to have solid 940/940 DL/UL on both iPerf3 and Speedtest.com
On 10G WAN (ax1), throughput is usually (as it fluctuates for no apparent reason) ~200M DL / ~1200M UL on both iPerf3 and Speedtest.com tested on a mGig client and ~200M DL / 940M UL on a 1G client

When running Speedtest from the OPNsense, I get a solid 6G/6G

Changing WAN (both port and speed) is the only change I've introduced and as soon as I go back to 1G on igb0, performances are back to what is expected.

Meraki TAC has been doing any sort of test and config change, this is not a SWITCH issue, I just don't know what is wrong with my FW.

Any help?

12

Web Proxy Filtering and Caching / Squid - how to whitelist WhatsApp file transfer?

« on: March 07, 2023, 10:13:32 pm »

Hello,

I've configured Squid transparent (SSL) proxy and added the ACL ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz
Having selected SOCIAL NETWORK as category to block, unfortunately blocks whatsapp file transfer

I've added .whatsapp.com and .whatsapp.net to both whitelist and SSL bump. Whilst it allows whatsapp messaging, I cannot get the file transfer (video, photo, files, etc.) to work.

Any hint?

13

23.1 Legacy Series / SSL DPI

« on: February 28, 2023, 10:39:25 pm »

Hello folks,

I’m looking to implement an SSL DPI function in order to policy some unwanted behaviour (ie. Snapchat.com).
I run Sensei that can block the Snapchat app, however its website can be easily accessed since traffic is encrypted and sensei fails to detect and block as it should.

Any pointers? I haven’t found any solution through OPNsense’s plugin repositories…

TYA in advance

14

23.1 Legacy Series / Expected behavior??

« on: February 24, 2023, 01:29:41 pm »

Hello,

Today I've noticed thousands of these (please see pic). It goes back to when I upgraded to 23.1

Is this expected behavior?

Not sure whether it's related to this, but my memory usage skyrocketed to 90% (it never went above ~45-50% before).

Thanks for taking the time to advise.

15

Hardware and Performance / DEC3840 - Fan Noise

« on: February 14, 2023, 02:39:40 pm »

Hey guys,

Lately my DEC3840 became noisier and noisier and I was wondering whether there's any settings I shall config in order to lower the fan speed and thus its noise.

ATM everything is set as HIADAPTIVE although configuring any other setting has no impact on fan speed whatsoever.

Also, fan are clean from dust/dirt buildup and I've also ran a good amount of vacuuming just in case.

I'm quite lost atm and I'd appreciate any pointers to get this sorted ASAP.

Worst case scenario, I may consider to replace fans with some NOCTUAs, however I'd like to get specs and/or manuals before opening the case and invalidating the warranty for nothing.

Cheers!