Topics

I'd like to understand why by default all the three hardware offload settings are disabled: should HW offload provide better speed/performance?

Tia.

I'm playing around with iperf3 testing the bitrate of the three Intel i210AT Ethernet ports of my APU2E4 - https://pcengines.ch/apu2e4.htm - connected to my laptop (Intel i5-3380M CPU @2.90 GHz dual-core, 12 GB of RAM DDR3) and I'm not getting good results, an average of 230 Mb/s while I was expxecting something around 900+ Mb/s

Code Select Expand

Connecting to host 192.168.0.1, port 5201
[  5] local 192.168.0.10 port 53877 connected to 192.168.0.1 port 5201
[ ID] Interval           Transfer     Bitrate         Retr  Cwnd
[  5]   0.00-1.00   sec  28.5 MBytes   239 Mbits/sec    0    351 KBytes
[  5]   1.00-2.00   sec  27.6 MBytes   231 Mbits/sec    0    351 KBytes
[  5]   2.00-3.00   sec  26.3 MBytes   220 Mbits/sec    0    352 KBytes
[  5]   3.00-4.00   sec  26.2 MBytes   219 Mbits/sec    0    352 KBytes
[  5]   4.00-5.00   sec  26.9 MBytes   226 Mbits/sec    0    352 KBytes
[  5]   5.00-6.00   sec  27.5 MBytes   230 Mbits/sec    0    352 KBytes
[  5]   6.00-7.00   sec  27.7 MBytes   232 Mbits/sec    0    352 KBytes
[  5]   7.00-8.00   sec  27.3 MBytes   229 Mbits/sec    0    352 KBytes
[  5]   8.00-9.00   sec  28.0 MBytes   234 Mbits/sec    0    352 KBytes
[  5]   9.00-10.00  sec  26.9 MBytes   226 Mbits/sec    0    352 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.00  sec   273 MBytes   229 Mbits/sec    0             sender
[  5]   0.00-10.00  sec   272 MBytes   228 Mbits/sec                  receiver

iperf Done.


In interface settings, I left the deafult values (pic. opn1) and I've just added the following tunables (pic. opn2)

Should I remove the tunetables or I'm missing something ?

Tia.

I'm trying to limit the Up/Down bandwidth for my kid's PS4 and this is what I did:

1) creating 2x pipes: up=5Mbs and down=10Mbs

2) creating rules: here I'm a bit confused when it comes to chose 'source' and 'destination', please see picture: is that right? 192.168.10.1 is the PS4 address

3) also, not sure if protocol should be ip or ipv4 ??

4) lastly, what about queues ? do I have to create those too ?

Can someone please advise if this is the right route or I should look elsewhere ?

Tia.

I'm running the latest release 20.1.7, using Unbound with Quad9 DNS servers, I've setup my kids iPad with a static lease and Cleanbrowsing DNS servers: is there a way to double-check that my kids iPad are actaully using Cleanbrowsing DNS servers?

Tia.

I did search quite a lot but I couldn't find a definite answer: I've enabled IDS + IPS and I'm still not sure whether or not I should also monitor the WAN port or just LAN...

By searching about the subject, I did find who was saying yes and others saying that it would make no sense as the firewall will drop bad packets anyway...

I was hoping to get a definite answer from any of the security experts of the forum...

Tia.

If I read it properly that security vulnerability was patched back to August 2018 and I just wanted the confirmation OPNsense had also that patch.

Many thanks.

Can someone please explain to me why I'm geeting these errors and what to do to fix them ?

Tia.

Would anybody know how to configure the Spamhaus ASN DROP List ?

I can see in the OPNsense documentation the instructions for both DROP and EDROP, but not for the ASN DROP list...

Tia.

I'm trying to understand the meaning of 'prioirty' in System->Gateways->Single as there are 255 possible values (the documentation doesn't say much), could anyone elaborate on that ?

I have only one gateway (WAN_PPPoE) and prioprity is set on 254: am I right to think that since I have only one gateway I don't really need to change the priority, it wouldn't make any difference at all, right ?

Tia.

Trying to configure DoT with Unbound and I've found three different settings to insert in the custom options field, very similar, just slightly different, so which one is the correct one, SSL or TLS, with or without the DNS names ?

1) server:
    forward-zone:
    name: "."
    forward-ssl-upstream: yes
    forward-addr: 9.9.9.9@853
    forward-addr: 149.112.112.112@853

2) server:
    forward-zone:
    name: "."
    forward-tls-upstream: yes
    forward-addr: 9.9.9.9@853
    forward-addr: 149.112.112.112@853

3) server:
    forward-zone:
    name: "."
    forward-tls-upstream: yes
    forward-addr: 9.9.9.9@853#dns.quad9.net
    forward-addr: 149.112.112.112@853#dns.quad9.net

Thanks.