OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 19.1 Legacy Series »
  • Call for testing: New netmap enabled kernel
« previous next »
  • Print
Pages: 1 2 3 [4] 5 6

Author Topic: Call for testing: New netmap enabled kernel  (Read 85437 times)

donatom3

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 11
    • View Profile
Re: Call for testing: New netmap enabled kernel
« Reply #45 on: March 24, 2019, 03:27:24 pm »
With the new net map kernel sense pi doesn’t detect any traffic on my interface that isn’t a vlan, but it has no issues with the two interfaces that are vlans. This is in intel i211 nics.

I am also not getting any hits in suricata on that non vlan interface.
« Last Edit: March 24, 2019, 03:32:46 pm by donatom3 »
Logged

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #46 on: March 24, 2019, 04:42:24 pm »
Hi donatom3,

Is the non-vlan interface the trunk (parent) interface for the other vlan child interfaces?
Logged

donatom3

  • Jr. Member
  • **
  • Posts: 67
  • Karma: 11
    • View Profile
Re: Call for testing: New netmap enabled kernel
« Reply #47 on: March 26, 2019, 07:57:38 am »
MB,

No the vlans were moved to their own interface.
Logged

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #48 on: March 27, 2019, 02:20:55 am »
Ok, let's have a look at this together.
Logged

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #49 on: March 27, 2019, 02:38:23 am »
This kernel has also support for native netmap support for vmx(4), VMware VMXNET3 Virtual Interface Controller   device.

https://svnweb.freebsd.org/base?view=revision&revision=344272

Native netmap support should yield better performance compared to the emulated driver.

Much appreciated if someone with an existing VMware deployment could test & provide feedback.

PS: Please note that you'll need to set vmxnet3.netmap_native tunable to 1  (from System: Settings: Tunables) to enable native netmap mode.


Logged

Antaris

  • Full Member
  • ***
  • Posts: 145
  • Karma: 13
    • View Profile
    • EVOTEK ltd.
Re: Call for testing: New netmap enabled kernel
« Reply #50 on: April 01, 2019, 04:57:13 pm »
Do setting vmxnet3.netmap_native require reboot to take effect?
Logged
Proxmox enthusiast @home, bare metal @work.

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13704
  • Karma: 1178
    • View Profile
Re: Call for testing: New netmap enabled kernel
« Reply #51 on: April 03, 2019, 10:43:14 am »
Hmm, where are we on this now?

We have conflicting reports on this second netmap kernel and the original merge window is approaching now (April/May) so I see potential for delay...


Cheers,
Franco
Logged

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #52 on: April 03, 2019, 06:06:08 pm »
Quote from: Antaris on April 01, 2019, 04:57:13 pm
Do setting vmxnet3.netmap_native require reboot to take effect?

Hi Antaris,

Yes, you'll need a reboot. Make sure it's in effect. Use this command:

Code: [Select]
sysctl vmxnet3.netmap_native
Logged

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #53 on: April 03, 2019, 06:07:40 pm »
Quote from: franco on April 03, 2019, 10:43:14 am
Hmm, where are we on this now?

We have conflicting reports on this second netmap kernel and the original merge window is approaching now (April/May) so I see potential for delay...


Cheers,
Franco

Hi Franco,

Agreed. We need to check a few issues reported if they are to be addressed or not.
Logged

Antaris

  • Full Member
  • ***
  • Posts: 145
  • Karma: 13
    • View Profile
    • EVOTEK ltd.
Re: Call for testing: New netmap enabled kernel
« Reply #54 on: April 03, 2019, 10:35:41 pm »
Quote from: mb on April 03, 2019, 06:06:08 pm
Quote from: Antaris on April 01, 2019, 04:57:13 pm
Do setting vmxnet3.netmap_native require reboot to take effect?

Hi Antaris,

Yes, you'll need a reboot. Make sure it's in effect. Use this command:

Code: [Select]
sysctl vmxnet3.netmap_native

And the result:

sysctl: unknown oid 'vmxnet3.netmap_native'

I added "vmxnet3.netmap_native" in System>>Settings>>Tunables and set it to "1"
Logged
Proxmox enthusiast @home, bare metal @work.

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #55 on: April 04, 2019, 12:06:57 am »
Quote
I added "vmxnet3.netmap_native" in System>>Settings>>Tunables and set it to "1"

Antaris, by checking your configuration, looks like you you're using native netmap for vmx now.

Let me see why tunable does not show up.

Logged

lrosenman

  • Full Member
  • ***
  • Posts: 189
  • Karma: 7
    • View Profile
Re: Call for testing: New netmap enabled kernel
« Reply #56 on: April 04, 2019, 02:06:53 pm »
I'm getting:
Code: [Select]
root@home-fw:~ # opnsense-update -bkr 19.1-netmap
Fetching base-19.1-netmap-amd64.txz: .. failed, no signature found
root@home-fw:~ # uname -a
FreeBSD home-fw.lerctr.org 11.2-RELEASE-p9-HBSD FreeBSD 11.2-RELEASE-p9-HBSD  f083bc4f8a0(stable/19.1)  amd64
root@home-fw:~ #
[code]

Is this now broken?
Logged

mb

  • Hero Member
  • *****
  • Posts: 917
  • Karma: 97
    • View Profile
    • Sunny Valley Networks
Re: Call for testing: New netmap enabled kernel
« Reply #57 on: April 05, 2019, 12:01:35 am »
Hi Irosenman,

You should now use:

Code: [Select]
opnsense-update -fbkr 19.1.4-netmap
See: https://forum.opnsense.org/index.php?topic=11477.msg55261#msg55261
Logged

lrosenman

  • Full Member
  • ***
  • Posts: 189
  • Karma: 7
    • View Profile
Re: Call for testing: New netmap enabled kernel
« Reply #58 on: April 05, 2019, 03:16:21 am »
should this help on em(4) devices with normal speed test type stuff? 

I'm on a protectli (https://www.protectli.com) FW1
on ATT Fiber (using https://github.com/aus/pfatt bypass for the RG).

My speeds are ~600meg/sec, but with the Ubiquiti USG I was getting 900+.

Ideas welcome...

I didn't make any changes to the config other than adding the new netmap kernel.

Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13704
  • Karma: 1178
    • View Profile
Re: Call for testing: New netmap enabled kernel
« Reply #59 on: April 05, 2019, 10:44:00 am »
I don't expect radical changes on em drivers. There's one commit we don't have yet which would suggest a considerable speedup in the IPS department, however:

https://svnweb.freebsd.org/base?view=revision&revision=345269

What remains to be seen is if this requires changes to Suricata to make use of the speedup potential.



Cheers,
Franco
Logged

  • Print
Pages: 1 2 3 [4] 5 6
« previous next »
  • OPNsense Forum »
  • Archive »
  • 19.1 Legacy Series »
  • Call for testing: New netmap enabled kernel
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2