1. Home
  2. TNSR

Subcategories

  • Discussions about TNSR

    18 Topics
    56 Posts
    P
    We’re excited to announce the release of Netgate TNSR 26.02, our latest update packed with powerful new features, expanded capabilities, and over 30 bug fixes and enhancements. What’s New in version 26.02? VPF High Availability State Synchronization Allows peers to automatically re-synchronize connection data when they restart VPF Statistics Output Filters Users can now filter VPF connection statistics output by connection type. This makes troubleshooting and gathering NAT statistics simpler and easier to read. Dynamic Routing Prefix-List Sequence Numbers Input validation no longer allows sequence numbers to start at 0. Upgrading TNSR will renumber entries in the prefix list starting at 1 VPP and DPDK Updates VPP is updated to version Stable/2510, and DPDK is updated to 25.07 Release Notes: https://docs.netgate.com/tnsr/en/latest/releases/release-notes-26.02.html Blog Post: https://www.netgate.com/blog/netgate-releases-tnsr-software-version-26.02 Learn More: https://www.netgate.com/tnsr

  • Discussions about TNSR

    41 Topics
    113 Posts
    P
    Feels like it’s been a while since this topic was brought up, and so much has happened since then. TNSR has really filled out but I’m sure there’s other features our users would love see in future releases. So with that said, please share your feature requests here and let’s see what we can do! —pfGeorge

  • Discussions about installing or upgrading TNSR software

    50 Topics
    196 Posts
    patient0P
    @shood said in install pfsense on opnsense DEC2700: Did you face any problems after installing pfSense on DEC OpenSense? Nope, all working normal. But I did use only the 10Gbit ports (ax0, ax1).
Log in to post
Load new posts
  • Q

    Question ACL using tcp flags option

    5
    0 Votes
    5 Posts
    2k Views
    Q
    @jimp Sorry for being so slow. Forgetting to check in to a new forum :) I think in iptables --syn actually only hit packets with SYN and ACK,RST and FIN bits cleared. Do I understand correctly if the rule, Iptable -A <chain> -j Deny -s <network> -p tcp --syn Translates to , action drop ip-version ipv4 source destination <network> protocol tcp tcp flags value 2 mask 18 Reason being "tcp flags value 2 mask 18" will only hit if SYN flag is set. It can't match the whole mask, that is to say ACK must not be set. Illegal combinations like SYN+RST will be ignored as it's not part of the mask. Other flag combinations will not be a hit as a SYN flag is not set. I guess I have a hard time getting that it's not like this. Value nominates what flag need to be set to start a match against the mask. The mask must be fulfilled to trigger the rule. This gives that "tcp flags value 2 mask 18" would only start check if SYN is set, and the rule would only trigger if the packet have SYN+ACK.
  • P

    IPFIX not sending traffic flow

    4
    1
    0 Votes
    4 Posts
    1k Views
    P
    @michmoor we use elastic with filebeat module for netflow collection
  • B

    Feature integration and NIC questions

    1
    0 Votes
    1 Posts
    627 Views
    No one has replied
  • M

    TNSR Home+Lab - apt update/upgrade safety

    8
    0 Votes
    8 Posts
    3k Views
    jimpJ
    No current limitations that I'm aware of, but we haven't had a similar update come up to get feedback about yet.
  • R

    TNSR Home Lab Newbie need some support

    15
    0 Votes
    15 Posts
    4k Views
    B
    @Derelict said in TNSR Home Lab Newbie need some support: @robbiett @remi_imer TNSR does not yet support DHCP6 in any fashion. Not on outside/client interfaces nor inside as a server. I do not believe it is possible to get it to work on this circuit given the ISP provisioning strategy. Is this still the case? Given that DHCPv6 PD seems to be the most common way for ISPs to provision IPv6 to at least residential customers, I'm a bit surprised it isn't supported yet. Are all business IPv6 customers simply using static configuration? VPP seems to support it since 2018 from what I can tell (both according to the wiki and git commit history), so in that case I'm guessing that the rest of the plumbing to hook it up to the CLI etc. hasn't been implemented yet? https://wiki.fd.io/view/VPP/DHCPv6#DHCPv6_prefix_delegation https://github.com/FDio/vpp/commit/81119e86bdf47f41f06218f91e52024bc4d00e7c
  • S

    TNSR on Proxmox - PCIe Passthrough VS Virtual

    2
    0 Votes
    2 Posts
    1k Views
    B
    @sentein Did you end up trying this out? If so, what were the results?
  • M

    Setting Up Postman for TNSR Management via API: a Step-by-Step Guide

    1
    0 Votes
    1 Posts
    505 Views
    No one has replied
  • M

    TNSR Software Version 23.06 is now available!

    1
    3 Votes
    1 Posts
    796 Views
    No one has replied
  • P

    Configuration backup for TNSR

    2
    1 Votes
    2 Posts
    778 Views
    fractal_boyF
    You can setup a cron job and pull /var/tnsr/running_db file using Ansible
  • P

    tnsr.sock daemon not running

    2
    0 Votes
    2 Posts
    802 Views
    DerelictD
    @paolobyte What adapter? Please be more descriptive in describing what exactly you are doing and what exactly is happening. A complete description of the hardware involved would also be a big help.
  • E

    BGP between tnsr and openwrt

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • S

    TNSR does not negotiate 5Gbps WAN connection properly

    tnsr home+lab att driver slow speeds
    1
    0 Votes
    1 Posts
    909 Views
    No one has replied
  • planedropP

    No Interfaces/Devs listed under "dataplane dpdk dev ?"

    4
    0 Votes
    4 Posts
    1k Views
    planedropP
    @paolobyte Appreciate the reply, I actually ended up nuking this VM though so I'll have to spin up a new one and test it again to see. I'll report back once I do that but it might be a bit.
  • V

    Monitoring BGP sessions using SNMP on TNSR

    5
    1 Votes
    5 Posts
    2k Views
    Dobby_D
    Usage of PRTG & Kentix SMS Gateway together may be informing you by SMS and eMail. Perhpas not the or a low budget solution, but very well working and able to set up in 30 minutes for everybody
  • S

    PKI Commands in docs don't work on 23.02.1

    Moved
    2
    0 Votes
    2 Posts
    835 Views
    jimpJ
    The pki commands in the docs are meant to be run from within the TNSR CLI, not at a shell prompt. There is no need to install any additional packages for that to work.
  • G

    TNSR Gui

    7
    1 Votes
    7 Posts
    9k Views
    F
    @tkerr Amazing job on the GUI! I'm not an expert linux user, but i was able to follow your documentation and I did just as you said. I set up TNSR on wmare esxi 7 using cli, setup wireguard for testing and experimenting, and setup the gui. Again, beautiful job, and I learned alot. [image: 1683243875980-tnsrgui.png]
  • F

    DataPlane Error in TNSR 23.02-3

    2
    4
    0 Votes
    2 Posts
    860 Views
    F
    UPDATE, not sure why, but changing the "Adapter Type" under the VM's setting from VMXNET3 to E1000e resolved the issue. Important to note, prior to this, I injected additional network drivers from fling in the same fashion as I did from a previous lab system where i was able to use USB network adapters with Esxi7 for a successful tnsr guest install. Also, after injecting the network drivers from FLING, the network adapters now display as follows: [image: 1683035803771-flingnet1.png]
  • E

    TNSR high rx miss

    5
    0 Votes
    5 Posts
    1k Views
    E
    @derelict OK but at what traffic level do you start seeing the misses? I made some runs. The problem beginns above 30Gbits [image: 1682884685046-stf-cap2-imix_1518-m300-d10-c16.png] [image: 1682884934842-stf-cap2-imix_1518-m350-d10-c16.png] [image: 1682884691033-stf-cap2-imix_1518-m400-d10-c16.png] And you are right. the performance without span interfaces is better. I don't know what I did wrong.
  • S

    TNSR Homelab, introduce latency

    3
    0 Votes
    3 Posts
    1k Views
    S
    Thank you for the reply.
  • M

    TNSR Software version 23.02 has been released!

    Locked
    1
    2 Votes
    1 Posts
    556 Views
    No one has replied
Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.