Messages

Maybe I'll have to see if my new hardware has an extra nvme slot and I can put in a database drive and just let it get beat on, but also be nice and fast.

Installing other software proves that the restrictions are not in place. You have to catch something in order to report back to the school. And if you are really concerned, you need to be proactive and try to find issues, because the IT team will never think of everything, there is always another loop hole that needs to be closed.

That is something to consider, I hadn't thought about the storage being any part of the slowness. There are other reason to buy the product, the policies flexibility is one of them. And when you find a product that you like, it's nice when you can support it and keep it moving forward.

Sometimes the over the top method is required to get people in schools to move. To be fair, they may not have the staffing to handle this and may be relying on the "magic of the chromebook" to keep the students safe, or on a vendor to create the settings (HP, Dell, etc.).

Examples of places to go are pron sites and gaming torrents to steal games, sports betting and other online gambling sites would also be good examples. I would not suggest trying to go to places that could result in an investigation, you can use your imagination to figure out my reference.

Also see if you can install additional software on the chromebook, things like other browsers that haven't been forced into safe search mode.

And don't forget to record all of it and make sure the screen is clearly visible so that everyone can see the address and content that appears.

Funny enough, last week I sent them an email to get current pricing for my work system... No replies yet. I have another support contract for a different product that we aren't renewing, and I wanted to see if ZA could fit in its spot.

I do wish they would make a reduced price lab license with full multithreaded support. Not sure how to keep people honest, but it would be nice.

Is there a recording available for those who couldn't attend?
Thanks

Me too.

I would try putting it on it's own vlan, and then install the free Zenarmor and have it monitor that new vlan and see what you can see. ZA is supposed to monitor/filter by SNI, so you might get somewhere with that.

I'd also be asking the school where the students are allowed and not allowed to go, in theory they can make adjustments to settings based on your needs. If they don't like it, then maybe time to deliberately go to bad sites, record all of it, and pass the info off to local news agencies.

This doesn't help you, but your post gave me an idea to check my local DB, and through a bunch of breaks, I finally got mine working again. I was on Elastic 5 and after breaking and then upgrading to Elastic 8 mine is now working again.

So thanks for the idea, wish I could help with your problem.

After reading another post, I went to the local elastic database to see if cleaning it would help.

I tried a reset reporting database which partly worked, but in the end showed a red error 200. I then tried to Perform Index Check, this also failed with error 200.

The Settings Database Health Check reports OK

And now on the live connections I get a database server not running error 200

I then went to change the database type to SQLight and noticed that I had an option to install elastic 8, so I installed it and now things are working again.

Apparently when ZA is upgrading, it won't upgrade the Elastic database and if you get old enough, it isn't going to work or it gets corrupted.

I have had ZA running for a couple years and never had a problem, after I finally updated to 26.4.2p2 ZA is broken. Things I've tried:

restart services
reboot
reinstall os-sensei & os-sunnyvalley
reboot
check for updates

I am using the emulated netmap. The only other thing I can think to do is remove all the monitored interfaces, and add them back in. Or change to the native netmap, but I thought it had problems under certain conditions and emulated was the better choice.

Here are some screenshots for versions, let me know if there are more settings you need to see to help me get this going.

Lab is back up and I'm getting things running again... Which one is likely to be fastest? That said, I have 200mbps down on a good day, more likely 100mbps down and maybe 50mbps up. Running this on my mifi device because it made life more simple.

I may try many of these to see the speed difference, I'm now running on an HP T740 with 16gb of ram (AMD V1756b processor), also on a quad port intel x710 with gigabit adapters installed. I may change to 10gb for LAN-LAN traffic, but clearly gigabit is plenty fast for my WAN connection. Harvester and Truenas Scale are up and ready to do some work.

But first things first, I need to get Netbird set back up on this "new" firewall so I can get back in from home.

Regarding the price, I recently paid a bit over $900usd for Protectli i5 with 16GB of ram, some smallish SSD, and 6 ports of i226. I would have purchased an OPNsense hardware, but they are really hard to get in the USA, and the recent prices with tariffs made them impossible. So the Mono price at $600 might not be that far out of line, but for my lab, it was more than I was willing to go right now. I have many HP T740 and cards, and an HP T620+ with 4 port card that still seems to mostly work. Lab is swapped to a T740 with 16GB, 120GB ssd, and quad port i710 for 1/10g connections. Total for this was around $300 when I bought all the parts, but most of that was before the rampocalypse.

I went to an AC charger to keep the mifi device on power. I'll have to look at the data blocker.

I haven't had time to look through logs to see why the USB into the firewall was causing an issue, I'm guessing it was detecting this and considering it wan, but not really getting it configured. The mifi has the ability to use either USB or ethernet to your firewall, so I'm guessing that even though I turned off the USB path, it was still allowing enough data to fool the firewall.

It is interesting, especially VPP support. Routing across local LANs at 10g with less overhead would be nice, something I may start doing in my lab just to see what the results might be. My current lab OPN device has a quad port x710 card installed, so I could get 3 LAN all going at 10g if I wanted to test it, WAN is still very limited.

There was some discussion on the Lawrence Systems forums about pf and the amount of code the submit back to BSD. A couple mentioned that OPN also contributes code back, but that there were politics that got in the way.

Sad that they are still being petty.