All about routers and performance
If you connect to an old IOS Catalyst you might get errors regarding unsupported Ciphers, KeyAlgorithms etc. This will do the trick: ssh -o KexAlgorithms=+diffie-hellman-group14-sha1 -o HostKeyAlgorithms=+ssh-rsa -o Ciphers=+aes128-cbc -l root 192.168.10.2
ntopng guys created a plugin based on the version I added to plugins and it offers the latest and greatest code, instead of the older binary from FreeBSD ports. You also can switch between community features or add your license key and run enterprise version. So goog to see a second vendor after Sensei […]
And again, there are many CVE’s from big vendors out there: https://security.paloaltonetworks.com/CVE-2020-2034 https://kb.juniper.net/InfoCenter/index?page=content&channel=SECURITY_ADVISORIES (Second link contains 18 SA’s just for one day, one vendor!)
Setup: Linux-A <-> OPN-A <-> OPN-B <-> Linux-B Every system is conntected via a Twinax 10G DAC cable. For testing, also Linux-A and Linux-B (both Debian with older Xeons (6-8 years old). OPN-X are newer SuperMicro boards, about 1 or 2 years old. NICs, dmesg and ifconfigs are here: Linux-A Linux-B OPN-A OPN-B All systems […]
… ever seen so many RCE’s in the last weeks? https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal https://security.paloaltonetworks.com/CVE-2020-2021 https://incidents.org/forums/diary/CVE20205902+F5+BIGIP+Exploitation+Attempt/26310/
This one worked well on my Zotac: https://www.linuxhelp.com/how-to-install-xfce-desktop-in-freebsd
https://www.signorini.ch/content/opnsense-create-pftable-for-google-networks
One of my Firewalls is up2date when I check for updates (24.9.19): Built on May 15th, so there was 4 months no update, for a security device? Not feeling really safe now. The latest realese on this is -p14 (at the time of writing). When I check the packages available via Package Manager, there is […]
Just have an APU2 here for testing. While installing FreeBSD I was stuck since I always used the serial image from OPNsense. So when you need to install vanilla FreeBSD escape the loader prompt with „3“ and put in:
In my standard 10G lab I’m testing with average server hardware from Fujitsu, Xeon processor, plenty of RAM, standard 10G cards (X520, X710). Doing my ususal measurements without any kind of tweaking I got these results (iperf, 10 streams and single stream): IPSEC (AES-GCM): 2.6 GbitWireGuard: 1.9 GbitOpenVPN: 1.1 GbitTinc: 700 Mbit