Messages

It may sound like a dumb question, but what if you use dnsmasq for DHCP?

I don't know about Untangle, but Zenarmor TLS inspection has:

- whitelist (do not inspect): factory defined whitelist and user whitelist;
- blacklist (always inspect);
- granular control (inspect only these categories of websites).

So, yeah, applying FTI to all websites/apps seems dumb, but applying it to only some of them is smart.

Well, same key works in any firewall. Just: in one firewall at a time. So, if you activate the key in a new firewall, all other firewalls using that key revert to free version.

Anyway, here are screen images from my two machines.

Elasticsearch uses several GB of RAM. It's not Zenarmor itself which eats all that memory. You could switch to SQL or MongoDB.

In my case Eastpect uses 4.4 GB and Java uses 6 GB. That's on OPNsense.

On Debian Eastpect uses by an order of magnitude less memory than Java. Java uses 6.7 GB. The machine has almost 7 GB free memory (it has 16 GB in total). And it is still running two Docker apps and a Samba server. Oh, yes, it has zram swap, which, going by CPU usage, it's mostly not being actively used (top says it has 2.7 GB used memory out of 9.4 GB total memory). Kibana and Elasticsearch use a ridiculous amount of virtual memory (over 21 GB each).

I suggest switching between native driver and emulated driver.

Ik zou aanraden de hardware in mijn tekening.

Als je geen Zenarmor doet, APU2 is goed genoeg.

Updated to 1.17.1.

So, go to https://dash.zenarmor.com/firewalls and restart Zenarmor service from there.

Restart the Zenarmor service (eastpect).

Some advice if you want to flash third party BIOS:

- buy an EEPROM programmer;
- check if it supports your chip;
- backup original BIOS (save it to the cloud).

And if you don't like neither, you may use dnsmasq. Yup, you can run both dnsmasq and unbound (on different ports), e.g. dnsmasq forwarding calls to unbound.

How?

# top

If a process is 100% or below, it is only one core.

Coming back to the N100, that one core is now mostly in the 50s, rarely in the 60s, at 110 MB/s download.

And with a T-Bao N9N Eastpect at one core stays below 60%, at 110 MB/s download.