Messages

121

Zenarmor (Sensei) / Re: Deciso DEC840/850 Sensei throughput

« on: August 31, 2021, 12:53:46 am »

Hi @athurdent, we had an email exchange about this with the OPNsense team a while ago.

And it looks like the team is very close to getting RSS in the kernel

https://twitter.com/opnsense/status/1425402746602246150

After it hits one of the OPNsense releases, we'll go ahead and enable multi-core support for Sensei.

122

Zenarmor (Sensei) / Re: Sensei and bufferbloat

« on: August 25, 2021, 08:46:09 pm »

Hi @fabian,

Passive mode uses the pcap interface, where "a copy" of the packet is handed over to Sensei while it's traveling to its destination. In this mode, Sensei runs in parallel to the packet flow.

L2/L3 modes uses the netmap interface where the packet is first handed over to Sensei and according to the policy in place Sensei decides whether to switch the packet or not. In this mode, Sensei in running in between the ethernet adapter and the host operating system.

In the latter, generally, we measure additional latency introduced by Sensei around 0.2ms. In the former case, since we're not in the middle of the packet flow, additional latency is zero. Having said that, because of this you cannot do filtering. It's useful for reporting.

123

Zenarmor (Sensei) / Re: Sensei and bufferbloat

« on: August 25, 2021, 05:28:31 pm »

Hi @fabian,

Bypass mode is not the same with Passive Deployment Mode. In L3 Mode, bypass allows you to temporarily bypass any Sensei packet processing while you're still running Sensei. In this mode, Sensei basically behaves like a dummy bridge.

Head to Sensei -> Status and locate "Services". There you'll see "Enter Bypass Mode" option where you see the "Sensei Packet Engine" information.

This test is to see if the additional latency is induced by netmap or the engine itself.

124

Zenarmor (Sensei) / Re: Sensei and bufferbloat

« on: August 25, 2021, 04:03:13 am »

Hi @fabian,

APU is quite a weak hardware but I think you should be able to attain higher speeds. What happens if you put Sensei into bypass mode?

125

Zenarmor (Sensei) / Re: Trick: Sensei on low end hardware, MongoDB tuning for low memory footprint

« on: August 08, 2021, 08:49:51 pm »

@fabianodelg,

Super happy to hear that you're enjoying the product.

And thanks for the research!. This looks like a very important tweak. I think we should go ahead and make this configuration default in the upcoming release (1.10).

126

Zenarmor (Sensei) / Re: Sensei - External elastic search - socket/open file descriptors exhaustion

« on: August 08, 2021, 08:47:08 pm »

@serbans, we have received the ticket. At first sight, this looks like a socket leak. We're digging deeper and will get back to you soon.

127

Zenarmor (Sensei) / Re: Announcement: Better to postpone 21.7 upgrade if you have igb(4) ethernet

« on: August 07, 2021, 03:01:14 am »

OPNsense team released 21.7.1 today. We've been able to verify that this release solves outstanding issues related to the igb driver.

All systems go for an upgrade

128

Zenarmor (Sensei) / Re: 21.7 and igb interface problem

« on: August 01, 2021, 06:06:34 pm »

@athurdent, Glad to hear that everything is ok now. Thanks for the update.

129

Zenarmor (Sensei) / Re: exclude IP from sensei

« on: August 01, 2021, 06:05:35 pm »

Got it. Looks like netmap. Can you send a bug-report? Let's have a look at your ethernet drivers & configuration.

130

Zenarmor (Sensei) / Re: FreeBSD Install

« on: July 31, 2021, 11:03:42 pm »

@jclendineng, we're still planning to include bridge mode in the next release (1.10). But it got delayed a bit. We had to re-architect the cloud agent; so that it can support a wider range of platforms.

Chances are high that we'll make it ready for the end of August.

131

Zenarmor (Sensei) / Re: exclude IP from sensei

« on: July 31, 2021, 11:01:29 pm »

What happens if you put sensei onto bypass mode? In the bypass mode, sensei will be just forwarding packets back and forth.

132

Zenarmor (Sensei) / Re: exclude IP from sensei

« on: July 31, 2021, 05:43:39 pm »

hi @actionhenkt, exempted networks/ip is the way to go.

Is this new (e.g. started after upgrade to 21.7) or has this been an ongoing situation?

133

21.7 Legacy Series / Re: 21.7 Boot hang at “Configuring VLAN interfaces...” with imported 21.1 config

« on: July 31, 2021, 12:53:24 am »

21.1.8 should be all ok; and expect updates from @franco or @adschellevis

134

21.7 Legacy Series / Re: OPNSense 21.7 -> Create USB Stick with Rufus / belenaEtcher

« on: July 31, 2021, 12:41:44 am »

@MBfromOK, do you happen to have any igb(4) ethernet on the device you're installing OPNsense?

135

21.7 Legacy Series / Re: 21.7 Boot hang at “Configuring VLAN interfaces...” with imported 21.1 config

« on: July 31, 2021, 12:39:07 am »

Hi @blblblb, things are going in the right direction; however, I'd advise waiting for a while and tune in for more updates from the OPNsense team.