See the test below that verifies this setup.
#Opnsense monit full
Gigabit throughput verificationĪfter these settings have been applied, your should be able to get a full gigabit throughput when using more than one connection at a time. The easiest way to do that is to add new system tunables as shown on the screenshot below. To enable multi queue support we want to add the following two settings, enabling multi processing on both transimitng and receiving queues. These NICs have 4/2 transmit and receive queues, being able to work simultaneusly on 4/2 connections. With some fine tuning, OPNSense can take advantage of this and route at 1Gbit when using more than one connection. should be set to 1. Checksum offloading is usually beneficial as it allows the checksum to be calculated (outgoing) or verified (incoming) in hardware at a much faster rate than it could be handled in software.ĪPU routers have very performant Intel and Network Interfaces. To turn this option on, go to System -> Settings -> Tunables and find "UDP Checksums". This offloads the CPU and increases bandwith. Similar to the setting above, Intel NICs can calculate the packet checksums in the hardware rather than at the OS level. Depending on the configuration of your firewall, you may want to experiment if this setting works equally well for your load. In our tests this setting increased throughput. TSO causes the NIC to handle splitting up packets into MTU-sized chunks rather than handling that at the OS level. Setting to 1 will enable hardware segmentation offloading (TSO, TSO4, TSO6). To turn this option on, go to System -> Settings -> Tunables and find "TCP Offload Engine". Intel NICs are able to use the "hardware TCP segmentation offload".
#Opnsense monit upgrade
See this other article for the BIOS upgrade instructions. To enable the boost, you need to upgrade your BIOS to version v4.9.0.2 or later. (this guidance applies only to APU2, APU3 and APU4 routers).ĪPU routers have AMD GX-412TC CPU which has 1.4GHz boost frequency. If you follow the steps below you will get a full gigabit speed.įirst things first: Upgrade BIOS on APU routers to get CPU boost All routers we offer in the store are have intel network interfaces, therefore it makes sense to tweak few settings to unlock extra performance.īy default routing performance on APU2-APU6 will be at around 650Mbit/s on OPNsense 21.1 and ~560Mbit/s on OPNSense 22.1. The default settings we get after OPNSense installation aren't optimal for intel NICs. There are several "system tunables" in OPNsense that unlock extra performance on compatible hardware. Many of our customers choose to run OPNsense on their routers. It also contains fail2ban for intrusion prevention.OPNSense performance optimization for gigabit speed Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. Making Docker and Kubernetes management easy. Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy Centreon is the only AIOps Platform Providing Holistic Visibility to Complex IT Workflows from Cloud to Edge.
Centreon is a network, system and application monitoring tool.
Docker container for managing Nginx proxy hosts with a simple, powerful interface
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers. Real-time performance monitoring, done right!
Community-based GPL-licensed network monitoring system Open Source Identity and Access Management For Modern Applications and Services When comparing Zabbix and authelia you can also consider the following projects:
0 kommentar(er)
