Recent posts

#81
Hardware and Performance / Re: Any tips or gotchas with S...
Last post by meyergru - November 30, 2025, 12:40:07 PM
Mistyped it, I meant X520-DAx.
#82
Hardware and Performance / Re: Any tips or gotchas with S...
Last post by patient0 - November 30, 2025, 12:16:24 PM
Quote from: meyergru on November 30, 2025, 11:49:42 AMI had 1/2.5/5/10 Gbps SFP+ modules running in an X510 with no problem.
What is X510, Intel?

But the chipset seems to have something to do with it. You are of course right, they do auto-neg at 10G to the OS/system. But some cards/chips seem not to be able to work with 1/2.5/5G/10G tranceivers in 2.5 or 5G mode.

But I don't want to polute this thread too much, I will keep search and reading about.
#83
German - Deutsch / Re: Log Files der Firewall feh...
Last post by chemlud - November 30, 2025, 12:12:20 PM
System -> Configuration -> History vielleicht...
#84
25.7, 25.10 Series / Re: unbound logger file increa...
Last post by Patrick M. Hausen - November 30, 2025, 12:09:44 PM
Do you have query logging enabled in Unbound?
#85
25.7, 25.10 Series / Re: 25.7.8 Unbound blocklist s...
Last post by OzziGoblin - November 30, 2025, 11:54:01 AM
I'll second this!

I've done quite a bit of testing, moving from Adguardhome to unbound and its BL's. Even using the same BL's with the URL's added to unbound make them identical, I'm still getting AD's coming through when using unbound, that I don't when using Adguardhome.
A restart of Opnsense also doesn't appear to make any difference, local client dns cache and browser cache clears as well as rebooted the client.

I'll give it a second go after the next upgrade
#86
Hardware and Performance / Re: Any tips or gotchas with S...
Last post by meyergru - November 30, 2025, 11:49:42 AM
It does not even matter, AFAIK. I had 1/2.5/5/10 Gbps SFP+ modules running in an Intel X520-DAx with no problem.

The SFP+ module reports at 10 Gbps to the host, whilst happily doing 2.5 GBps on the line. The only thing is that you cannot control the line speed, it is always auto-negotiated.
#87
25.7, 25.10 Series / Re: Unable to Upgrade to 25.7....
Last post by meyergru - November 30, 2025, 11:46:08 AM
Your observations are mostly correct, however, note that there are needed tunables for Intel N-type and Alder Lake / Twin Lake series CPUs as noted here, point 23.

The ill effects of the CPU idiosyncrasies become more visible with UFS than with ZFS. To fix this completely, apply the tuneables, install microcode updates AND use ZFS.
#88
General Discussion / Re: TUI for viewing and analys...
Last post by patient0 - November 30, 2025, 11:42:07 AM
Thank you, I compiled and copied it over to a OPNsense instance. It's much easier now the scrolling and 'ip (4|6)' filtering. And the filter expression can be modified.

The filtering is remarkable fast. I run one of the OPNsense instances on a VM with 2 CPUs/4GB RAM on Proxmox. The filter file from yesterday has around 102'000 entries.

It takes around 7 seconds to start up with the filter file and filtering for 'ip 4' which results in 87'000 items is instant, execellent.

Edit: it takes around 7 seconds if started from the VM console. Running it from a SSH session, it only takes about 1.5 to 3 seconds to start.
#89
25.7, 25.10 Series / Re: Unable to watch Yortube
Last post by meyergru - November 30, 2025, 11:37:42 AM
Yes, obviously, as evidenced by the fact that you cannot stream any videos or login on youtube.

Would should anyone make of this?

Anything more specific? Did you upgrade before things went awry? Did it work before? Do other sites work?
#90
Tutorials and FAQs / Re: ndp-proxy-go: Proxy ISP pr...
Last post by meyergru - November 30, 2025, 10:48:03 AM
N.P., Cedrik, this just made it to https://forum.opnsense.org/index.php?topic=42985.0, point 29.