Recent posts

#1

26.7 Series / Re: without skipping a beat 7....

Last post by OPNenthu - Today at 12:09:51 AM

Maybe my question could be misinterpreted as lack of appreciation so I want to clarify that is not the case.  I thought you were implying an older version as your starting point and maybe had a typo.  That's all.

I agree, smooth bi-weekly updates are much appreciated and not to be taken for granted :)

#2

General Discussion / DNS over tls when running two...

Last post by DEC740airp414user - Today at 12:01:14 AM

I subscribe to nextdns and controld

I've been using controld as my only dns over tls server.   Well today their service was down for about an hour.     It had been a Long time since I enabled two servers.  Today  I enabled both services I subscribed too.

I then logged into the nextdns website, and every sec it said I was using their service then it kept going to red saying I was not


Can anyone explain how dns over tls works when you have two servers added?

#3

26.7 Series / Re: 26.7 plug-in AdGuardhome n...

Last post by Patrick M. Hausen - October 11, 2026, 11:57:32 PM

Woher kommt denn nun diese andere Anleitung?

#4

26.7 Series / Re: 26.7 plug-in AdGuardhome n...

Last post by Mondmann - October 11, 2026, 11:54:00 PM

@PatrikM.Hausen

Vielen Dank für deinen Hinweis! In der Tat eine "Saubere Sache" und läuft nun alles Super...

#5

26.7 Series / Re: without skipping a beat 7....

Last post by vimage22 - October 11, 2026, 11:43:10 PM

And BTW. the point of this post is to confirm that an upgrade is so complete, and it covers all edge cases and creates a stable, reliable platform for x number of users. Where x = ??

#6

26.7 Series / Re: without skipping a beat 7....

Last post by vimage22 - October 11, 2026, 11:36:45 PM

I meant from:
OPNsense 26.7.5 released
to:
OPNsense 26.7.6 released
Worked perfectly.

and the reference to a much older version was from 24.x.x.

does this answer question?

#7

26.7 Series / Re: Gradual Internet Performan...

Last post by tonys - October 11, 2026, 11:33:31 PM

I suspect Unbound is the culprit since my IoT and Guest networks bypass Unbound and run fine with DNS servers 8.8.8.8 and 1.1.1.1. Only the LAN is affected because Unbound passes its traffic to Quad9 servers. Unbound logs show all DNS traffic going out since I added bypasses from servers blocked by Steven's Blacklist.

Are you using blocklists with Unbound? Try without them. Monitor Unbound with logs, ps, etc.
Although is best to find the hogging process or activity and zoom in, that's what I would do if Unbound appears fine. We're only following a hunch after all.

and unnecessary services (ClamAV, Netflow) are turned off

Good. These are relatively heavy processes.

Yes, I'm using Stevens Blacklist with about a dozen domains whitelisted that affected the Mac laptops and phones. No unusual blocks being seen in the Unbound logs.

Most of my settings are the same as they were in the final release of 21.x. I had absolutely no problems at all under 21.x, all of my problems started after upgrading to the first and subsequent releases of 26.7. I have a feeling that all of this is related to Unbound targeting quad9 DNS servers because a key point is that turning on Proton VPN in any LAN device instantly restores fast connectivity to the internet. Turning Proton off causes stalls on some sites which I can sometimes get to by reloading the page. The browsers constantly throw "page took too long to load" errors regardless of the browser I'm using.

The OPNSense web gui is very slow to load at all times, even after a reboot. Logins can take 30-60 seconds and changing pages in the GUI is also very slow. After a day or two of running, I can't even get into the GUI and typically reboot the router at the command line. External web sites may or may not load immediately after a reboot so I turn on Proton. After reboot today, I couldn't get to this site without turning Proton on.

I've now turned off Stevens Blacklist and will test under these conditions. Unbound continues to route to Quad DNS.

#8

26.7 Series / Re: Gradual Internet Performan...

Last post by tonys - October 11, 2026, 11:29:04 PM

I only want to change one thing at a time to ease troubleshooting. The network slowed to a crawl again so I'm attaching a process dump file immediately after a reboot and one that took about a day and a half to reach enough slowness to cause me to do another reboot.

I don't see anything weird either so it got me thinking : Maybe it's the storage ?!

You also did not mention anything about the Unbound logging level setting that I mentioned earlier ?

Can you post the output of :

Code Select Expand

# smartctl /dev/<whatever you HDD/SSD is> -aand if possible also

Code Select Expand

# iotop Hopefully that's it and replacing the HDD/SSD will be enough to fix this...

Please note that /var and /tmp are running in a ramdisk. I moved to ramdisk a couple of weeks ago thinking the SSD was too slow but now I doubt it.

Attached is the smartctl output. Also note there is no ioctl command on my system?? Unbound logging level is set at error. Switching to debug mode, all I see are information and notices, no warnings and no errors.

#9

26.7 Series / Re: without skipping a beat 7....

Last post by OPNenthu - October 11, 2026, 11:26:53 PM

Did you really mean to write 26.7.5?  That's only a couple weeks old.

#10

26.7 Series / without skipping a beat 7.5 to...

Last post by vimage22 - October 11, 2026, 11:07:27 PM

How is it that i can update from OPNsense 26.7.5 to OPNsense 26.7.6 with zero issues? Very impressed..., which is an understatement.
And i saw a much older installation update to the latest version without any issue, after many incremental updates, with a rather complex setup, which was perfect in the end.
So very impressed.