Messages

No? Just go ahead and do it. It's not rocket science.

There's a bug in the boot loader in FreeBSD that under specific circumstances with the plugin installed makes the system hang at boot.
There is a workaround in the updated plugin in 26.7.1, so you should IMHO definitely re-add that. Also consider updating your boot loaders.

Running without microcode updates for known CPU bugs is probably not a good idea.

@JohnSchnee try:

Code Select Expand

opnsense-patch https://github.com/opnsense/core/commit/9412fa3bd8

Reference: https://github.com/opnsense/core/issues/10553

net.link.bridge.inherit_mac=1 makes the bridge inherit the MAC address of the first member interface the moment it is added.

Try net.link.bridge.inherit_mac=1

@meyergru It looks to me similar to creating a lagg with only one member to "abstract away" different interface names in a HA setup with different hardware.
@lmoore Clever one!

*deleted*

If the modem has two ethernet ports you could use two interfaces on OPNsense (or VLANs distributed via a switch) to connect to

- the modem network
- the proper uplink

Just a thought. I do this. I do not piggyback the modem network on top of the PPPoE interface. I use two completely separated ones. I think this could be even more important for DHCP instead of PPPoE.

About right.

Probably they are simply not supported by FreeBSD.

Hardware compatibility list:

https://www.freebsd.org/releases/15.1R/hardware/#ethernet
https://man.freebsd.org/cgi/man.cgi?query=re&sektion=4&format=html

I cannot find any 2.5G Realtek adapers in there, only 1G Realtek and 2.5G Intel.

Scrub yes. TRIM yes, if you do bot have autotrim enabled.

Code Select Expand

zpool get autotrim zroot


Also, if the kernel/zfs implementation was just updated, you cannot use older snapshots if you upgrade the zpool.

You mean in the context of OPNsense and boot environments, not ZFS in general, right?

To elaborate: you cannot boot an older boot environment (what the UI calls "snapshots") because that contains an older kernel from before your upgrade which is not compatible with the new ZFS features and won't import the "new" pool.

But of course from a strictly ZFS point of view you can copy an older snapshot to another system, you can mount it, you can copy files from it, etc. Snapshots from a previous ZFS version continue to work as snapshots. But they cannot be bootet, anymore once the pool is upgraded.

N.B. ZFS snapshots are not necessarily boot environments. You can snapshot any dataset, e.g. for backup purposes. Only rarely happens in OPNsense.

You can type "zpool upgrade" without naming the pool and you will get a list of the new ZFS features introduced in FreeBSD 15. Then it's yours to decide if you need any of them.

To upgrade the pool, you can use "zpool upgrade zroot".

BUT BUT BUT

IF you decide to upgrade the pool, you MUST also update the boot loader to the one that comes with the current OS or your system will be unbootable.

Background:

New features are introduced to ZFS all the time. To ensure backward compatibility ZFS does not enable any of the new ones for any existing pool. You need a current kernel and a current boot loader to support the latest and greatest version of ZFS with all features enabled.

Hence this message every time the systems finds a pool with an older version of ZFS than the running system would support.

But your OPNsense ran perfectly fine with the previous version of ZFS without these brand new features, right? So need to upgrade you do not. Want to upgrade ... beware of outdated boot loaders.

HTH,
Patrick

Kurzfassung: alles, was ein "Client" ist, wechselt die Adressen munter durch und braucht ja auch keinen DNS-Eintrag. Alles, was ein "Server" oder "Dienst" ist, und im DNS stehen soll, konfiguriert man statisch. Oder halt per SLAAC, Server würfeln die Adressen nicht.

Firewall-Regeln auf IP-Adress-Basis für "Clients" macht man nicht. Alles mit identischem Vertrauens-Niveau ins selbe VLAN, gleiche Regeln für alle.

Das Problem das du mit der Kombination von SLAAC und DynDNS hast, ist, dass sich die Entwickler von IPv6 nicht vorstellen konnten, dass ISPs so bekloppt sein würden, "dynamische Prefixe" zu vergeben. Das ganze Konzept ist, endlich wieder eine eindeutige Adresse für jedes Gerät zu haben. 🤷

Then you need to upgrade your bootloader to the one that is in 26.7 - /boot/loader.efi - copy that to your EFI partition.