Messages

1

22.1 Legacy Series / Re: OPNsense 22.1.1_3 Upgrade to 22.1.2 - UNBOUND 100% CPU - Recovery needed

« on: March 12, 2022, 12:34:36 pm »

Hello devhunter55,

If you're seeking for adguard home plugin, mimugmail made it available through his opn-repo:
https://github.com/mimugmail/opn-repo

There's a forum thread on steps to follow to install it smoothly:
https://forum.opnsense.org/index.php?topic=22162.msg128415#msg128415

I'm using it since a while now, and works like a charm.

Kind regards,
Vincent

2

20.1 Legacy Series / Re: Package request : adguardhome

« on: April 23, 2020, 09:02:08 am »

Thanks mimugmail and franco for your answers.

I'll follow your method franco.

Cheers

3

20.1 Legacy Series / Re: Package request : adguardhome

« on: April 22, 2020, 10:37:30 pm »

Just to clarify my request: i'm just asking for the base package available (through command line), not for a complete opnsense webui plugin.

4

20.1 Legacy Series / Re: Package request : adguardhome

« on: April 22, 2020, 10:03:33 pm »

Hello,

Could it be possible to have a feedback on my request?
Positive one would be of course preferred, but any feedback would be appreciated.

Thanks and stay safe
Vincent

5

French - Français / Re: Opnsense et Proxmox ou pc dédié

« on: April 15, 2020, 09:45:09 pm »

Bonjour Darkopnsense,

J'ai fait mes tests avec speedtest (appli dédiée, pas le site web) par praticité.
Il y a donc une marge d'erreur dans les perfs obtenues

Cordialement

6

French - Français / Re: Opnsense et Proxmox ou pc dédié

« on: April 15, 2020, 12:56:57 am »

Bonjour,

Opnsense sur un PC dédié est une meilleure idée d'un point de vue sécurité, au moins tu es sûr de maîtriser ce qui se passe d'un point de vue physique.

Petite vigilance sur l’apu en fonction de votre débit internet.
J’utilise un apu2c4 depuis quelques temps maintenant, et chez moi le débit plafonne entre 560 et 700 Mbps en fonction des règles de filtrage actives.
Donc si vous avez une liaison 1Gbps, vous ne pourrez pas atteindre le débit max avec un apu2.

Bonne journée

7

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 13, 2020, 12:27:04 pm »

Thanks Gary for your support.
I did the test as planned and there is no obvious performance drop upgrading up to v4.11.0.4. They start to appear with v4.11.0.5.
So it's obviously the new energy efficient parameter that creates the issue.

I've also tried to disable to NIC energy efficiency with your parameter in tunables.
There's a tiny performance bump with them, but that's not a very significant one.
I'm afraid i'll have to resign upgrading to some new hardware to handle my fiber at full gigabit speed with opnsense.

Thanks a lot to your help, and have a nice Easter Monday
Cheers

8

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 12, 2020, 09:14:05 pm »

Thanks for the hint, I will give a try flashing on v4.11.0.4 tomorrow.

I confirm the performance drop on v4.11.0.5 isn't only opnsense/freebsd related.
I tried booting on an openwrt flash drive on the same hardware, and experience performance drop in a worse way even : 940 Mbps down to 340 Mbps.
My fiber line is 1Gbps down / 400 Mbps up. Sadly not reaching full speed with apu2c4 on it. And tried a few performance tuning on it, not sure i have found all though.

I'll keep you informed of the test results with v4.11.0.4 tomorrow.
Have a lovely evening.

9

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 12, 2020, 11:00:06 am »

Thanks Gary for your support.
I just did test with a 30s unplug before rebooting after flash and still experience the large performance drop with this method.

Happy Easter.
Cheers

10

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 11, 2020, 01:10:02 pm »

Hello.

As a start, i apologize if not the good topic to post that question.

I'm using an APU2C4 with Opnsense up to update (20.1.4).
While flashing coreboot from v4.9.0.5 to v4.11.0.5 I experienced a huge performance drop :
average DL speed :
- v4.9.0.5 : 580~600 Mbps
- v4.11.0.5 : 260~300 Mbps

Reverting coreboot version to v4.9.0.5 turned back speed up to 580~600 Mbps as before.

Is anyone aware of similar problems ?
Did I miss some tunables to set after the firmware upgrade ?

Thanks for your help.
Cheers

11

20.1 Legacy Series / Re: Package request : adguardhome

« on: April 10, 2020, 01:55:38 am »

There is no subscription needed for it.

It's the locally hosted counterpart of their adguard DNS service.
More info : https://github.com/AdguardTeam/AdGuardHome

It's way more powerful than IP/domains lists since it can use filter grammar of popular adblocker (adblock, ublock, ...).
You can even enforce safe search for search engine, which is very useful for kids :-)

I'm using it so far since 9 months, and am pretty happy of it.
Cheers

12

20.1 Legacy Series / Package request : adguardhome

« on: April 09, 2020, 03:58:44 pm »

Hello,

I'm actually running adguard home to filter my DNS at home, and saw there's official freebsd support.
https://svnweb.freebsd.org/ports/head/www/adguardhome/

I would love to have it embedded in opnsense, that would allow me to get rid of 3rd party server just for it.
Could it be possible to have the package available for manual install ?

Thanks a lot and have a safe day
Vincent

13

17.7 Legacy Series / Re: Suricata error, DNS crashes

« on: August 04, 2017, 04:33:18 pm »

Hello J,

I've checked in /var/log/suricata.log, including history of past days, no track of that set caps error message.

Suricata is bound on igb1 for me, maybe the driver has an impact on the caps.

Cheers,
Vincent

14

17.7 Legacy Series / Re: Congrats on 17.7

« on: August 02, 2017, 03:33:51 pm »

Hello,

For the last suggestion, a less complex way could be to automatically install on the first version a feature is moved into plugin.
And adding in release notes that those modules can be removed if useless after the upgrade.
That way it get smooth for the upgrade, don't requires tricky dialog to add, and lets the user remove unneeded things if documented in the release note

Cheers,
Vinceynt

15

17.7 Legacy Series / Re: Suricata error, DNS crashes

« on: August 02, 2017, 03:04:38 pm »

Hello Anon87 and Franco,

I experienced similar issue with my upgrade path from 17.1.11 to 17.7
My config had suricata enabled (in IDS mode) and DNS activated.
All working fine in 17.1.11

After upgrading to 17.7 i got what seems a similar issue to what Anon87 described: unbound DNS was not resolving any more DNS.
Only exceptions were my local domain hosts entries resolved properly.

Stopping/disabling suricata didn't change to the issue.
But i found in "System > Settings > General" an option that seemed new to me:

Code: [Select]

"Allow DNS server list to be overridden by DHCP/PPP on WAN"It was checked by default, and unticking it made my DNS magically resolving back external named (and resisting to reboot issue mention by Anon87).

Could it be a reason for you too that the change you makes don't resist for a reboot Anon87?

I hope that experience sharing will help.

Cheers,
Vincent