Installer successful on Proxmox

[tillsense]

First Look.. :)




Update 28.11.18 -> 5.2-10 to 5.2-3 (5.2-10 was the manager)

[franco]

So far so good, thanks!  8)

[Mundan101]

First Look.. :)

Does IPS/IDS work with the virtio drivers?

[tillsense]

IPS / IDS is not my first look  :o

[chrcoluk]

yeah it runs great on proxmox, I have tested it on proxmox at almost 950mbit throughput, ran perfectly.

[tibere86]

Did you passthrough to your NICs or did you get those results using the Virtio network drivers? I'm curious as I currently have a Proxmox box I'm not getting much use out of that I would like to run OPNsense on.

[chrcoluk]

virtio drivers.  It works way better than esxi which surprised me.

I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.

Note this is over NAT as well.  As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.

[tibere86]

virtio drivers.  It works way better than esxi which surprised me.

I sent a screenie to martin via email a while ago as well showing throughput vs cpu load, I will try and hunt it down for you.

Note this is over NAT as well.  As I started deploying it on hosts where the isp's have unfavourable terms on ipv4 allocation.

Thanks, I would love to see that.

[lewald]

Nope IPS / IDS did not work. Complete Networktraffic frozen when used with virtio driver. without IPS / IDS and virtio opnsense runs fast.

[chrcoluk]

here is the screenshot I apologise tho this was when it was still on 18.7 not 19.1, but it is proxmox using virtio.

PTI is disabled.

[lewald]

Hi,

yes i can confirm that with virtio the opnsense works fine and fast as Long as you have disabled  IPS/IDS.

That was the big Question. "Does IPS/IDS work with the virtio drivers?" and here i can say opnsense do not work with this Options on.

[tillsense]

Hi second look,
flowd not work anymore (19.1.r1):
(suricata with iommu card ok)

Code Select Expand


kernel: [HBSD SEGVGUARD] [python2.7 (61604)] Suspension expired.
kernel: -> pid: 61604 ppid: 52950 p_pax: 0xa50<SEGVGUARD,ASLR,NOSHLIBRANDOM,NODISALLOWMAP32BIT>


cheers till

[franco]

Yup, on it, see https://forum.opnsense.org/index.php?topic=11237.0

[tillsense]

Hi Franco,
ok regardless of the proxmox test. very nice. your fix looks good here as well.

cheers till

Update:
opnsense: 19.1.r1 + Fix https://github.com/opnsense/ports/commit/ebb9fee7627a
proxmox-ve: 5.3-1 (pve-kernel 4.15.18-10)

[franco]

Super, thanks for the feedback Till  8)