Recent posts

#1

26.7 Series / Re: Upgrades continuously fail...

Last post by Nullman - Today at 01:21:32 PM

But a memtest86+ overnight also produced this: https://photos.app.goo.gl/7ErMivVG8Rx1cbe67

There you go. Your memory is dead. I hope its not DDR5 because thats worth more than gold today.

#2

26.7 Series / Re: Upgrades continuously fail...

Last post by davegod75 - Today at 12:44:28 PM

Yep, it's an asrock n100m board, running bios 1.10.  I see an update that says microcode and memory compatibility. https://www.asrock.com/mb/Intel/N100M/index.asp#BIOS

But a memtest86+ overnight also produced this: https://photos.app.goo.gl/7ErMivVG8Rx1cbe67

#3

26.1, 26,4 Series / Re: Firewall rules migration

Last post by DEC740airp414user - Today at 12:19:01 PM

migrated firewall rules back when this thread first started.
did Nat just now with the latest business release migration tool.

no issues, but I have a very simple home setup on a Dec740

-beershake

#4

General Discussion / Re: os-ddclient plugin doesn't...

Last post by viragomann - Today at 11:25:27 AM

And your VPS has a dynamic IP?

#5

Intrusion Detection and Prevention / Re: High RAM usage after upgra...

Last post by matttarget - Today at 11:00:02 AM

Hello,

We upgraded our OPNsense firewall from 25.7 to 26.1.11_10 and noticed a significant increase in memory usage immediately after the upgrade.

System specifications:

OPNsense 26.1.11_10
8 GB RAM

Before the upgrade, total memory usage was typically around 20–30%. After the upgrade, it increased to around 76–90%.

To troubleshoot the issue, I disabled the HostWatch service, which reduced memory usage from approximately 90% to 78% Basketball Bros, but it is still much higher than before the upgrade.

According to the top output, the Suricata process is consuming approximately 5.8 GB of resident memory, making it the largest contributor to the overall RAM usage.

Has anyone experienced similar behavior after upgrading to 26.1.11_10?

Hi Elvin,
I saw the same thing after upgrading to 26.1. In my case, Suricata was the main culprit, not the firewall itself. I disabled IPS temporarily, restarted Suricata, and the memory usage dropped back to normal. Re-enabling it with fewer rules fixed the problem for me. I'd try that before focusing too much on HostWatch.

#6

26.7 Series / Re: Upgrades continuously fail...

Last post by franco - Today at 08:36:58 AM

Is this one of the fancy N100ish boxes that need microcode updates perhaps?


Cheers,
Franco

#7

26.7 Series / Re: How reliable is Firewall:D...

Last post by franco - Today at 08:06:55 AM

@newsense it's not in business as that is still on 14.3 and this is specific to 15.1

#8

26.7 Series / Re: How reliable is Firewall:D...

Last post by franco - Today at 08:06:09 AM

perhaps you missed the UI screenshots i posted already -> https://forum.opnsense.org/index.php?msg=272854

which clearly show it's not working....

Still unsure and a bit exhausted by this discussion. Your states dump indicates the packet originated from vmx3 which cannot match

@41 block drop in quick on vmx2 inet from <IPC8:1> to any label "dadac13d-fc61-4e50-9ff3-4769740d87b1"

so the label is rlabel c0b243c6-f1d4-471d-8dcf-62046c6215b0 which is a different rule.

I take not accuracy for the state tracking. I merely added the label from the associated rule. If there is more considerable weirdness in the state tracking we've only just started being able to diagnose it.

That being said it's really demotivating to get negativity for doing something uniquely new trying to solve this for the community. Isn't the first time coming from you to be honest.


Cheers,
Franco

#9

26.7 Series / Re: No install on my new CWWK

Last post by jxxaxxy - Today at 03:39:34 AM

Did you try ZFS.  I believe a lot of folks here had issues with UFS and intel nxxx products.  You can use ZFS on a single drive.

#10

26.7 Series / Re: Upgrades continuously fail...

Last post by davegod75 - Today at 01:32:15 AM

Ugh, failing with a hd just swapped in, maybe bad memory?  What's weird is I can re-install just fine, but it updates fail.  hmm

https://drive.google.com/file/d/1BPfAHCTxDO-_6eDUDHUhzZRd4Q-Lb0rC/view?usp=drivesdk