"Recent posts
#1
German - Deutsch / Re: Performance verbessern
Last post by Manu_King - Today at 12:12:19 PMHallo,
Danke für deine Nachricht.
Ich habe den Durchsatz ebenfalls mit iperf3 gemessen da kommen bei mir 1.3 gibt raus mit deaktiviertem zenarmor auch so im Dreh 2.3 bis 2.5 gbit. Meine Frage wäre vielleicht weißt du ja wie man aus dem Setup das maximale an Leistung rausholen kann ohne zenarmor abzuschalten. Vielleicht durch Tuneables. Oder unbound Einstellungen um DNS Auflösung zu beschleunigen.
Liebe Grüße Manuel
Danke für deine Nachricht.
Ich habe den Durchsatz ebenfalls mit iperf3 gemessen da kommen bei mir 1.3 gibt raus mit deaktiviertem zenarmor auch so im Dreh 2.3 bis 2.5 gbit. Meine Frage wäre vielleicht weißt du ja wie man aus dem Setup das maximale an Leistung rausholen kann ohne zenarmor abzuschalten. Vielleicht durch Tuneables. Oder unbound Einstellungen um DNS Auflösung zu beschleunigen.
Liebe Grüße Manuel
#2
26.7, 26.10 Series / Re: Unable to import Trust Aut...
Last post by chandrayandeepak - Today at 11:52:00 AMThey are Private authority certificates, already using in earlier versions of OPNsense CE. We follow:
System -> Trust -> Authorities -> Add -> Import an existing Certificate Authority and paste. Screenshots attached.
BTW, we were able to import leaf certificate successfully.
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
System -> Trust -> Authorities -> Add -> Import an existing Certificate Authority and paste. Screenshots attached.
BTW, we were able to import leaf certificate successfully.
-----BEGIN CERTIFICATE-----
....
-----END CERTIFICATE-----
#3
26.7, 26.10 Series / Re: Upgraded to 26.7.8 from 26...
Last post by Manfred.Knick - Today at 11:33:06 AMYou have observed the recommendations to save via
--> System: Configuration: Backups,
right?
Download the install media for the version you desire to run,
exploit OPNsense Importer [1] during re-install and enjoy
a fresh clean consistent Firewall executing your previous working config
within minutes.
[1] "For new installations or migrations, follow this process: ..."
[ https://docs.opnsense.org/manual/install.html#opnsense-importer ]
--> System: Configuration: Backups,
right?
Download the install media for the version you desire to run,
exploit OPNsense Importer [1] during re-install and enjoy
a fresh clean consistent Firewall executing your previous working config
within minutes.
[1] "For new installations or migrations, follow this process: ..."
[ https://docs.opnsense.org/manual/install.html#opnsense-importer ]
#4
26.7, 26.10 Series / Kernel panic during reboot aft...
Last post by filippo24 - Today at 11:04:47 AMPosting this just for the record this problem. For now, everything works fine now.
Setup: mini PC with Intel N150, 8 GB RAM, Intel i226 ports. OPNsense 26.7.7, with Zenarmor active only on the LAN interface (igc1).
What happened:
I updated from 26.7.7 to 26.7.8_1 (bootloader already updated).
During the automatic reboot, the system took longer than usual and a kernel panic occurred. The attached .txt crash log shows it happened while the old system was shutting down, and it mentions Zenarmor's netmap adapter on igc1 just before.
On the following boot (with monitor video)it panicked again with "panic: no init" (photo attached, i haven't ful txt log), and stayed stuck until I booted a previous snapshot from the console.
From the snapshot I ran the update again with Zenarmor disabled, and it rebooted without problems. I then re-enabled Zenarmor, rebooted, and everything is fine on 26.7.8_1.
(So unfortunately I don't know if it was really a zenarmor bug that maybe corrupted the current boot environment or if it was an isolated case)
Note: since I needed the firewall back up quickly, the attached crash log and photo are all I saved. I can't say whether this is reproducible, an isolated glitch, or really related to Zenarmor.
Setup: mini PC with Intel N150, 8 GB RAM, Intel i226 ports. OPNsense 26.7.7, with Zenarmor active only on the LAN interface (igc1).
What happened:
I updated from 26.7.7 to 26.7.8_1 (bootloader already updated).
During the automatic reboot, the system took longer than usual and a kernel panic occurred. The attached .txt crash log shows it happened while the old system was shutting down, and it mentions Zenarmor's netmap adapter on igc1 just before.
On the following boot (with monitor video)it panicked again with "panic: no init" (photo attached, i haven't ful txt log), and stayed stuck until I booted a previous snapshot from the console.
From the snapshot I ran the update again with Zenarmor disabled, and it rebooted without problems. I then re-enabled Zenarmor, rebooted, and everything is fine on 26.7.8_1.
(So unfortunately I don't know if it was really a zenarmor bug that maybe corrupted the current boot environment or if it was an isolated case)
Note: since I needed the firewall back up quickly, the attached crash log and photo are all I saved. I can't say whether this is reproducible, an isolated glitch, or really related to Zenarmor.
#5
26.7, 26.10 Series / Re: Upgrade to 26.7.8 broke Ga...
Last post by saki22 - Today at 10:31:25 AMI found my isp does not support IPv4 i had the IPv6 turn off when i turn on my IPv6 in wan ever thing now working right
#6
26.7, 26.10 Series / Re: Unable to import Trust Aut...
Last post by franco - Today at 10:12:48 AMPlease take note of:
https://github.com/opnsense/changelog/blob/16a1fae3e4c0e4a2faccccf100e8c4045caec966/community/26.7/26.7.8#L18-L22
If it's just public certs please attach them here and describe exactly how you are trying to add them so we can reproduce as well.
Thanks,
Franco
https://github.com/opnsense/changelog/blob/16a1fae3e4c0e4a2faccccf100e8c4045caec966/community/26.7/26.7.8#L18-L22
If it's just public certs please attach them here and describe exactly how you are trying to add them so we can reproduce as well.
Thanks,
Franco
#7
26.7, 26.10 Series / Re: Unable to import Trust Aut...
Last post by chandrayandeepak - Today at 10:09:22 AMImporting RootCA and Intermediate, not using Private key, just the certificate.
#8
26.7, 26.10 Series / Re: Upgrade to 26.7.8 broke Ga...
Last post by franco - Today at 08:32:08 AMHotfixed now, thanks!
#9
Announcements / Re: OPNsense 26.7.8 released
Last post by franco - Today at 08:31:01 AMA hotfix release was issued as 26.7.8_1:
o system: revert "allow a single dynamic interface gateway to work for both IPv4 and IPv6"
o system: revert "allow a single dynamic interface gateway to work for both IPv4 and IPv6"
#10
26.7, 26.10 Series / Re: Unable to import Trust Aut...
Last post by franco - Today at 08:20:10 AMHow does the private key start and end with? The "----" parts I mean.
Cheers,
Franco
Cheers,
Franco
