Call for testing: official netmap kernel

[nines]

So I should better go back to 20.1 as you can't reproduce that behavior on your site right?
ruleset is the same so that shouldn't be an issue


Sent from iPhone via Tapatalk

[mb]

Hi @Nines, correct. Netmap-wise, you look good.

WRT IPS, I'd suspect from the configuration & rulesets if you were able to attain higher speeds on 20.1.

[nines]

did some more tests.
its slow if ips is enabled on "wan"
its fast if ips enabled on "lan"
How can that be? What am I missing here? Shouldnt the rules be processed in either scenario? Where does the difference in performance come from?

just for reference:

 

WRT IPS, I'd suspect from the configuration & rulesets if you were able to attain higher speeds on 20.1.

dont know how because the configuration and rulesets did NOT change.

[scream]

Installed on test vm.
Performance with vmx interfaces are still bad so I have to revert to 20.1.

[mb]

did some more tests.
its slow if ips is enabled on "wan"
its fast if ips enabled on "lan"
How can that be? What am I missing here? Shouldnt the rules be processed in either scenario? Where does the difference in performance come from?

Hi @Nines, nmbridge test shows the results with regard to the netmap & kernel alone. If this provides the expected result, this means you're good with regard to the kernel & netmap.

For IPS, unfortunately I'm not so much deep into the details. How about discussing it in the IPS forum?

[nines]

Hi mb, as I wrote in #42 ithe results with nm bridge were better but there was still a huge difference compared to 20.1 WITH enabled ips.
In my oppionion the current kernel is definetely not performing as good as with 20.1 and as such the performance with enables ips is even worse.

Yes, ubench result is good, but overall performance is far away from 20.1. I know you and your team have put a huge amount of work into this but I think it's better to point out potential issues then having to deal with the complaints later on.

To be clear: you can definetely assume that the results mentioned here are not sourced from external factors like esx load, webserver load or something else. I can easily check this by just restoring both vmware snapshots back and forth - it MUST have something to do with 20.7 and/or the kernel. The results are strictly "following the problem atic version" and never appear with 20.1 (as said, performance with 20.1 and enabled ips is always a lot better then 20.7 with disabled ips, rest of the config is exactly the same)

Thanks again for your support and work.


Sent from iPhone via Tapatalk

[heresjody]

Still going strong with the test kernel. On both my em and my vtnet interface servers no crashes since I installed in 7 days ago. 

Just checking: Can I safely apply the netmap test kernel to 20.7.3?

[andreaslink]

Kind of a same question, I just updated to v20.7.3 and came from the 20.7.2-netmap kernel. Now my wireguard side2side tunnel does not connect anymore.

Is there something like opnsense-update -kr 20.7.3-netmap so I can proceed testing the new kernel?

[mb]

Hi @heresjody, @andreas,  it's best to wait for @franco to announce 20.7.3-nemap kernel. It's most probably not there yet.

[andreaslink]

Upsi, then I was too ambitious....

root@OPNsense:~ # opnsense-update -kr 20.7.3-netmap
Fetching kernel-20.7.3-netmap-amd64.txz: ......... done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-20.7.3-netmap-amd64.txz... done
Please reboot.

[heresjody]

Upsi, then I was too ambitious....

root@OPNsense:~ # opnsense-update -kr 20.7.3-netmap
Fetching kernel-20.7.3-netmap-amd64.txz: ......... done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-20.7.3-netmap-amd64.txz... done
Please reboot.

😂😂 But does it work? 🤔

[mb]

I guess @andreas will make the 20.7.3-netmap announcement soon

[andreaslink]

Hehe, sorry, that was not my intention, I thought, if no package is available yet, it would not find anyhing and therefor not proceed.
That's why I surprisped myself slightly . So as said, I guess too ambigious, it rebooted, but kernel does not look much different (it's from 21.09.).

[franco]

We put 20.7.3-netmap there for users to find to provide all the updates of 20.7.3 with all the netmap things from master branch plus Realtek driver update. No need to wait for approval. 


Cheers,
Franco

[andreaslink]

Cool, thanks @Franco, so if I understood you correctly, then I'm back on the netmap testing track with my update now? So the update worked as initially assumed by me?