1. Home
  2. pfSense® Software
  3. Development

Subcategories

  • Discussions about development snapshots for pfSense Plus 25.11

    9 Topics
    66 Posts
    yon 0Y
    I urgently need to upgrade to the latest version of FRR 10. last pid: 50887; load averages: 2.35, 2.29, 2.41 up 0+20:30:18 05:20:00 105 processes: 3 running, 102 sleeping CPU: 46.3% user, 0.0% nice, 21.0% system, 1.2% interrupt, 31.6% idle Mem: 1505M Active, 1806M Inact, 1921M Wired, 14G Free ARC: 228M Total, 66M MFU, 155M MRU, 533K Anon, 1302K Header, 4429K Other 185M Compressed, 414M Uncompressed, 2.24:1 Ratio Swap: 1024M Total, 1024M Free PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 77832 root 4 141 0 2583M 2462M CPU2 2 505:23 196.84% bgpd 38116 root 1 1 0 23M 11M select 2 7:55 1.61% openvpn 44320 root 8 0 0 228M 155M select 3 17:31 1.12% zebra 58666 root 1 0 0 14M 3664K select 0 47:36 0.70% miniupnpd 63264 root 1 0 0 23M 11M select 2 0:36 0.51% openvpn 41157 root 1 0 0 23M 11M select 0 1:14 0.39% openvpn 81930 root 1 0 0 23M 11M select 2 1:00 0.32% openvpn 22300 root 5 59 0 15M 3144K uwait 1 0:01 0.24% dpinger 62794 root 1 0 0 267M 234M select 2 0:32 0.16% bsnmpd 48156 root 1 5 0 15M 4236K CPU1 1 0:00 0.15% top 78090 root 1 0 0 26M 10M select 3 16:03 0.14% ntpd 95229 root 1 59 0 14M 3008K nanslp 2 0:01 0.06% cron 23298 root 5 59 0 15M 3140K uwait 1 0:01 0.04% dpinger 17794 root 5 47 0 15M 3140K uwait 3 0:01 0.04% dpinger 26716 root 5 59 0 15M 3140K uwait 2 0:01 0.03% dpinger 21621 root 5 59 0 15M 3140K uwait 0 0:01 0.03% dpinger 24135 root 5 59 0 15M 3148K uwait 1 0:01 0.03% dpinger 23729 root 5 59 0 15M 3152K uwait 1 0:01 0.03% dpinger 18311 root 5 57 0 15M 3192K uwait 1 0:01 0.03% dpinger 25099 root 5 59 0 15M 3136K uwait 0 0:01 0.03% dpinger 35794 root 1 0 0 25M 13M select 2 0:00 0.03% sshd-session 20955 root 5 59 0 15M 3132K uwait 3 0:01 0.03% dpinger 21956 root 5 59 0 15M 3136K uwait 0 0:01 0.03% dpinger 19832 root 5 59 0 15M 3148K uwait 3 0:01 0.03% dpinger 20181 root 5 59 0 19M 3276K uwait 1 0:01 0.03% dpinger 19392 root 5 59 0 15M 3140K uwait 2 0:01 0.03% dpinger 22947 root 5 59 0 15M 3144K uwait 1 0:01 0.02% dpinger 24345 root 5 59 0 15M 3140K uwait 2 0:01 0.02% dpinger 21305 root 5 59 0 15M 3140K uwait 0 0:01 0.02% dpinger 69255 root 1 0 0 14M 2892K kqread 1 0:13 0.02% tail 26294 root 5 59 0 15M 3136K uwait 1 0:01 0.02% dpinger 24687 root 5 59 0 15M 3140K uwait 1 0:01 0.02% dpinger 71886 root 1 0 0 14M 2880K select 1 0:12 0.02% tail 20571 root 5 59 0 15M 3140K uwait 1 0:00 0.02% dpinger 25472 root 5 59 0 19M 3272K uwait 1 0:01 0.01% dpinger 6517 root 9 0 0 58M 26M select 2 0:03 0.01% kea-dhcp4 22779 root 5 59 0 19M 3276K uwait 1 0:01 0.01% dpinger 18902 root 5 59 0 15M 3136K uwait 0 0:01 0.01% dpinger 25947 root 5 59 0 19M 3292K uwait 2 0:01 0.01% dpinger 68884 root 1 0 0 14M 3504K kqread 2 0:09 0.01% syslogd 17031 root 1 0 0 25M 8468K select 3 0:03 0.01% watchfrr 8925 root 9 0 0 46M 24M select 1 0:02 0.01% kea-dhcp6 663 root 1 0 0 125M 37M kqread 1 0:04 0.01% php-fpm 15542 root 1 0 0 23M 11M select 1 0:08 0.00% openvpn 50040 root 1 0 0 15M 3892K bpf 3 0:03 0.00% filterlog 51743 root 1 0 0 37M 14M kqread 1 0:51 0.00% nginx 37889 root 1 59 0 163M 67M accept 3 0:28 0.00% php-fpm
Log in to post
Load new posts
  • yon 0Y

    Support for Edwards Curves

    5
    1 Votes
    5 Posts
    1k Views
    johnpozJ
    @aligator638 yeah see my edit, maybe I needed more coffee ;) Not sure what I was thinking - sorry about that. I did some research this morning - and it seems there is a way to use it, but not with the official versions as of yet, I saw talk of compiling your own version and or manually doing some settings. While that might be possible in pfsense, until its a standard feature in the released versions you most likely will not see it available in the pfsense openvpn settings.
  • senseivitaS

    One big ruleset

    2
    1
    0 Votes
    2 Posts
    810 Views
    stephenw10S
    So you would like to see a single page firewall view because that would enable drag-and-dropping a selection of rules between interfaces? Steve
  • L

    pfSense GUI damn(!) slow due to ^Firewall Logs^ widget

    53
    1
    0 Votes
    53 Posts
    13k Views
    L
    Hello, I think I have solved all issues. The version I will upload in a moment to the bug-tracker-side does have the same functionality as the original NetGate version. However, on my system and setup, it is nearly 20-times faster and does process a maximum of 250 lines from the firewall log in opposite to only 50 in the original version (which is relevant if you e.g. would like to select alarms from one specific interface). I also shorted the timestamps printout, since I did not like it and assume nearly any one is interested to see the micro seconds. If you want to use or test it, you can download it from https://redmine.pfsense.org/issues/12673
  • JeGrJ

    Questions about DHCPd: new service on the agenda? DHCP pool restrictions?

    3
    1 Votes
    3 Posts
    862 Views
    JeGrJ
    @jimp said in Questions about DHCPd: new service on the agenda? DHCP pool restrictions?: Yes, it's EOL. We'll be working on moving to Kea but not for this release. We've been using Kea with much success on TNSR, so we are hopeful that is the best path forward. That said, we still need to look into how it does things like failover pools. Oh really exciting to read. I almost assumed it's a OpenBSD like situation that FreeBSD runs its own fork and will do so further down the road but I see that I now have to read on and check out Kea myself :) @jimp said in Questions about DHCPd: new service on the agenda? DHCP pool restrictions?: I'm not sure how Kea handles that second part but if they are actually reservations there then we can obviously lift that restriction after moving to Kea. Oh then I'm sorry and "my bad" for assuming they actually were reservations. I just followed a similar discussion where ISC-dhcpd was concerned and either there was some misconception or they weren't aware, that preferences weren't really reservations. But thanks for the update that gives additional input if that question pops up in the future again. Have to read Kea docs, if that is actually supported there (just for informational purpose). Thanks again, Jens
  • L

    How to use GUI screen controls / (Colors / Graphics Mode)

    7
    0 Votes
    7 Posts
    1k Views
    L
    @jimp One other reaction to add. I do not know which security measures / precautions Netgate makes with packages, e.g. with which authorization level they are running, however adding whatever 'external' code to your system is always a risk and surely if the involved system is a firewall. So, but if you allow that whatever package to be installed, than you trust that package and an installed package does IMHO technically have the capability to do all kind of unwanted things with your platform. If one of those more or less trusted packages generates fixed html code, it sounds strange to me to see that html code from one of your own packages as ^dangerous^ where the fact that the package is installed is again in my feeling is far more dangerous. So, I do not need the htmlspecialchars() protection replacement for this case, but I do scratch my head why it is dangerous
  • S

    Modifying and developing the iPerf3 package

    2
    1 Votes
    2 Posts
    1k Views
    bmeeksB
    This long thread from earlier this year should help kickstart your effort: https://forum.netgate.com/topic/169749/pfsense-compile-requirements-for-3rd-party-software. This thread was about a different binary package, but the information is directly applicable to your iperf3 work. You will first need to create a FreeBSD package builder environment based on the pfSense version you are targeting. Today that is FreeBSD 12.3-STABLE for pfSense CE and pfSense Plus RELEASE, and FreeBSD-14.0-CURRENT for the DEVEL snapshot branches. You will find the binary pieces of iperf3 here: https://github.com/pfsense/FreeBSD-ports/tree/devel/benchmarks/iperf3. The PHP GUI component of the package is here: https://github.com/pfsense/FreeBSD-ports/tree/devel/benchmarks/pfSense-pkg-iperf. There is very little documentation of the process. Be prepared to draw upon your experience (or else you will have to spend a good deal of time on Google searching for clues and tips).
  • JeGrJ

    new wireguard from FBSD14?

    2
    0 Votes
    2 Posts
    1k Views
    jimpJ
    We're already looking into that. We were aware about it before it went in, it's something we've been keeping a close eye on.
  • W

    how to start?

    4
    0 Votes
    4 Posts
    1k Views
    bmeeksB
    @watermirror said in how to start?: [00:00:46] [01] [00:00:11] Finished devel/libffi | libffi-3.3_1: Failed: fetch This is the only error that matters. The others that followed it are just a symptom as they have libffi listed as a dependency, so when that port fails to build the others with a dependency on it will also fail to build. To see why libffi is failing, you will need to examine its Makefile and perhaps the Poudriere build log for that package. The error says it failed to fetch the source code. That could be because the repo referenced in the Makefile is offline, or it might be that the source file location has been customized to some place not publicly accessible (like a private GitHub, for instance). And lastly, I will say that trying to build a custom pfSense image is not for the faint of heart. It requires quite a bit of patience to track down and correct some weird errors, and it also demands a lot of experience with using and maintaining FreeBSD build environments.
  • ?

    FreeBSD 13

    Moved
    25
    0 Votes
    25 Posts
    5k Views
    keyserK
    @stephenw10 said in FreeBSD 13: Yup, so does main/14. This does sound as a very very interesting deveolpment for pfSense. However, I’m not a FreeBSD user/follower apart from on my SG-xxxx boxes, so a few questions arise: 1: How big is the difference between 12/Stable and 14/Main in the bits pfSense use/exploit? IE: What will be the most noticable news for pfSense users? 2: Is it a huge leap in additional drivers availability and supported hardware? I’m thinking mainly NICs and especially 4G/5G dongles/hardware support. 3: Is 22.11/2.7’s only focus to change FreeBSD base and PHP build, or will there be other new features/requests included?
  • interwebsiteI

    This topic is deleted!

    1
    0 Votes
    1 Posts
    6 Views
    No one has replied
  • J

    Temperature Alert Script

    7
    0 Votes
    7 Posts
    9k Views
    luckman212L
    Leaving this here in case it's useful to anyone... github.com/luckman212/pfsense-temp-alert
  • L

    IMHO actual pfSense GUI is slow ..

    5
    0 Votes
    5 Posts
    2k Views
    keyserK
    @cool_corona said in IMHO actual pfSense GUI is slow ..: @louis2 Its in development and therefore is bet/rc. I find the GUI quite responsive actually. It’s all about the widgets you have applied to the dashbord. Remove the bad offenders, and the GUI/login will be much quicker.
  • B

    Where to start with package development

    Moved
    1
    0 Votes
    1 Posts
    790 Views
    No one has replied
  • J

    Intel E823-C 25/10GbE NIC Support?

    2
    0 Votes
    2 Posts
    2k Views
    stephenw10S
    Probably possible to backport it but that's very unlikely to happen at this point. It would remove development resources from the work to rebase which is currently underway. Watch this space.
  • M

    L2TP Server - Adding a routed subnet to users

    4
    0 Votes
    4 Posts
    2k Views
    stephenw10S
    Ah, OK. Then I'd create it as a feature request in Redmine.
  • B

    Add extra widget with my python/javascript files

    1
    0 Votes
    1 Posts
    906 Views
    No one has replied
  • luckman212L

    Long running php process vs cronjob

    1
    0 Votes
    1 Posts
    810 Views
    No one has replied
  • K

    Warning when saving, any place this is done?

    5
    0 Votes
    5 Posts
    2k Views
    K
    And what about not filling in this field by default, only making it mandatory if the user filled in the IP address? Unless you type in an IP address that page still behaves as it did before and if the the user types in an IP address the user is forced to provide the subnet mask... This way it will never warn about the subnet mask unless there is a reason to do so (ie it is missing...). Doesn't this make way more sense than what I suggested earlier, to warn when it is a /32, not knowing whether it is good or not? If the user has to actually fill it and it still manage to still fill in the wrong information then (s)he is a lost cause... Thank you and have a nice day! Nick
  • M

    building pfsense iso from source, ./build.sh --skip-final-rsync iso. error

    4
    0 Votes
    4 Posts
    2k Views
    stephenw10S
    Can we assume you tried the suggested --clean-builder and it made no difference? What do the logs show? Steve
  • luckman212L

    use of $x <> $y vs. $x != $y

    3
    0 Votes
    3 Posts
    2k Views
    luckman212L
    Ok, if nobody else wants to do it I'm happy to rip through them and get them all consistent.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.