Messages

31

20.1 Legacy Series / Re: Increased latency since 20.1.8 upgrade

« on: July 05, 2020, 11:06:28 am »

I noticed and still notice that pages take longer to load after the 20.1.8 update. I therefore ran the speed test and searched the forum. I did not run a speed test with 20.1.7 because I didn't experience that there was something wrong with my setup; "health is silent" I presume. Can I revert to 20.1.7, if so how do I do it?

32

20.1 Legacy Series / Re: Increased latency since 20.1.8 upgrade

« on: July 04, 2020, 10:22:45 pm »

The prior version was 20.1.7. I just noticed that I got a little too enthusiastic with the numbering scheme 20.1.18 -> 20.1.8 

33

20.1 Legacy Series / Re: Increased latency since 20.1.8 upgrade

« on: July 04, 2020, 06:38:06 pm »

These are my results from a symmetric 100 mbit fibre connection after the 20.1.18 upgrade, with an EdgeRouter X as reference.

EdgeRouter X 1.10.11 - DL 107,92 UL 108,57 response time 3,32 ms

APU2C4 OPNsense 20.1.18_1 DL 32,16 UL 8,33 response time 12,73 ms

miroco

34

General Discussion / Re: OPNsense myteriously blocking OpenVPN traffic

« on: May 19, 2020, 12:34:36 am »

These are my settings.


miroco

35

General Discussion / Re: OPNSense in VirtualBox; No login

« on: May 09, 2020, 01:14:38 am »

If your CPU doesn't support long mode, the general consensus seems to be; Use a 32bit distribution. If it's not a BIOS issue, you should perhaps start looking for newer hardware. The upcoming 20.7 version will be 64bit only.

https://www.thomas-krenn.com/en/wiki/Activating_the_Intel_VT_Virtualization_Feature

miroco

36

General Discussion / Re: OPNSense in VirtualBox; No login

« on: May 08, 2020, 03:43:48 pm »

What if you try the amd64 image?

https://www.dell.com/downloads/emea/products/pedge/en/PE2900_Spec_Sheet_Quad.pdf

miroco

37

Hardware and Performance / Re: Hardware recomendatoins for a small form factory "rugged" device

« on: May 08, 2020, 12:07:39 am »

PC Engines APU2x4 is popular choice and it meets all four criteria.

The most recent revision is APU2e4

https://www.pcengines.ch

miroco

38

Tutorials and FAQs / Re: Best way to shutdown

« on: May 01, 2020, 03:45:23 pm »

This is how I do it. Depending on your hardware, you additionally might have to turn off the power physically like unplug a power supply from your OPNsense appliance or flick a switch. If there's a better way, I'm all ears.

miroco

39

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 15, 2020, 12:40:39 am »

Unless you have these wireless adaptors (ipw, iwi) I see little use in agreeing to those license terms, and as far as I can tell there are no license terms to agree on regarding the igb driver in the Tunables section and consequently not in a /boot/loader.conf.local - file. These are my findings.

ipw -- Intel PRO/Wireless 2100 IEEE 802.11 driver
iwi -- Intel PRO/Wireless 2200BG/2225BG/2915ABG IEEE 802.11 driver
igb -- Intel(R) PRO/1000 PCI Express Gigabit Ethernet adapter driver

https://www.freebsd.org/cgi/man.cgi?ipw
https://www.freebsd.org/cgi/man.cgi?iwi
https://www.freebsd.org/cgi/man.cgi?igb

The Teklager "OPNsense performance optimization for gigabit speed" guide seems to have been based on OPNsense 19.1 or 19.7 judging from the copyright information at the bottom of the top screen shot (OPNsense (c) 2014-2019 Deciso B.V.)

https://teklager.se/en/knowledge-base/opnsense-performance-optimization/

The settings referring to "hardware checksum offload, hardware segmentation offload and large receive offload" are all found under the Interface - Settings section.

That leaves the "tx" and rx" receiving queues settings.
hw.igb.rx_process_limit="-1"
hw.igb.tx_process_limit="-1"

Enabling EEE seems to come with a penalty.
WARNING: enabling EEE will significantly delay DHCP leases and the network interface will flip a few times on boot. https://en.wikipedia.org/wiki/Energy-Efficient_Ethernet

https://calomel.org/freebsd_network_tuning.html
https://www.thomas-krenn.com/de/wiki/OPNsense_igb_EEE_Funktion_deaktivieren

I think the BIOS is the joker in the game, especially since the release of v4.11.0.5.

40

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 14, 2020, 12:18:51 am »

Did you happen to come across this post about optimizing the APU2x4 for gigabit speed?

https://forum.opnsense.org/index.php?topic=13899.0

41

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 09, 2020, 10:45:29 pm »

I've got an APU2C4 with Bios v4.11.0.5 running OPNSense 20.1.4

I can verify @Gary7 observations that they are also true to the earlier revision of the APU2x4 platform. My internet speed is a modest 100 Mb/s.

42

General Discussion / Re: Power outages tolerance

« on: April 06, 2020, 09:31:23 pm »

ZFS on Linux on Tomato

A proof of concept. I just thought someone might find interesting.

https://www.linksysinfo.org/index.php?threads/zfs-on-linux-on-tomato.74603/

miroco

43

Tutorials and FAQs / Re: HOWTO - DNS Security / Unbound DNS with DNSCrypt, DoH Plugin for IPv4 + IPv6

« on: March 04, 2020, 05:24:01 pm »

I found these posts useful.

https://forum.opnsense.org/index.php?topic=5593.0
https://forum.opnsense.org/index.php?topic=9245.0

44

20.1 Legacy Series / Re: VPN: OpenVPN: Log File Loading...

« on: February 29, 2020, 07:52:16 pm »

Thank you for the rapid response.

miroco

45

20.1 Legacy Series / Re: VPN: OpenVPN: Log File Loading...

« on: February 29, 2020, 01:14:59 pm »

As far as I can tell, apart from the OpenVPN log file, Backend and General under System, Plain View under Firewall and Unbound DNS also seem to be affected. They all just show "loading..."