eMMC Write endurance

michmoor

@brodng Just throwing in my 2cents here regarding pfblockerNG.
I am running it on a SG1100. I do have Global IP Logging enabled but i make sure my list only applies to traffic leaving my LAN (outbound). Assuming you don't have anything suspect on your LAN you shouldn't get that many hits or any at all.

If you are using DNSBL that's a bit tricky because you do need the logging. I made it a point to disable DNSBL because of the overall usefulness of it in general on pfsense. I have per-vlan blocking lists that i need to apply for different use cases and pfblocker cant do it so i use pihole.

Lastly the default deny rules. I created a rule called "Global Deny" that's at the end of my firewall list and i don't set logging to it. Tends to take care of any denies being written to disk further conserving the life of the drive.

SteveITS

@brodng First off, I wouldn't panic.

Is it possible to check the remaining eMMC usable life on a base 4200?

No, it isn't on that model. I think that's the only one though? (for others: https://docs.netgate.com/pfsense/en/latest/troubleshooting/disk-lifetime.html#emmc)

@brodng said in eMMC Write endurance:

How do I disable all logging

See a list of ideas at:
https://forum.netgate.com/topic/195879/netgate-2100-life-expectancy/8

stephenw10

@SteveITS said in eMMC Write endurance:

I think that's the only one though?

The RCC-VE models also used USB attached eMMC, so: 2440, 4860, 8860
Never really saw any significant eMMC issues on those though.

Some of the early 1100s used an eMMC version that the util couldn't read.

brodng

@michmoor said in eMMC Write endurance:

@brodng Just throwing in my 2cents here regarding pfblockerNG.
I do have Global IP Logging enabled but i make sure my list only applies to traffic leaving my LAN (outbound).

When I re-enable it I’ll make sure it’s setup this way.

If you are using DNSBL that's a bit tricky because you do need the logging.

Not using it either. Thought it would be difficult to maintain and setup accurately.

Lastly the default deny rules. I created a rule called "Global Deny" that's at the end of my firewall list and i don't set logging to it. Tends to take care of any denies being written to disk further conserving the life of the drive.

Will definitely do this, good idea.

brodng

@SteveITS said in eMMC Write endurance:

@brodng First off, I wouldn't panic.

I’m not panicking yet : ) Seems inevitable that the storage will have an issue. Would like to get ahead of the problem. I work remote so I would rather schedule the down time.

Is it possible to check the remaining eMMC usable life on a base 4200?

No, it isn't on that model. I think that's the only one though? (for others: https://docs.netgate.com/pfsense/en/latest/troubleshooting/disk-lifetime.html#emmc)

That’s a downer : ( Is it not technically feasible with the base 4200 or could it be added via a firmware update? I’m going to put in an SSD but would be great if this could be added. May help to keep people from panicking.

@brodng said in eMMC Write endurance:

How do I disable all logging

See a list of ideas at:
[https://forum.netgate.com/topic/195879/netgate-2100-life-expectancy/8](
https://forum.netgate.com/topic/195879/netgate-2100-life-expectancy/8

Thank you will check this out.

Is there a an official guide to upgrade the base 4200 with an NVMe drive? Found a YouTube video but it wasn’t very clear on how to clear the eMMC.

Didn’t realize the base model was so limited due to the eMMC compared to the Max. Figured I could upgrade later if needed. Well, now I needed, lol.

SteveITS

@brodng https://docs.netgate.com/pfsense/en/latest/solutions/netgate-4200/m-2-nvme-installation.html

JonathanLee

I would do the flash drive make a backup also when you visit your parents.

install and get it running backup config on one flash drive.
do the same process again and label it as backup flash drive.

Just roll with it stuff goes out sometimes. The option to use a usb drive helps alot

You could also go this route and create ln (liker files) that redirect my log files for snort and squid to another drive, could be usb or anything else.

smolka_J

This post is deleted!

stephenw10

Hmm, have you actually tested that? I was not able to read it when I tried on the 4200 I have here. How did you invoke the command?

smolka_J

This post is deleted!

stephenw10

Yup from Linux running on the 4200. It's the same utility effectively. Linux still doesn't provide low level enough access to the eMMC to read it.

[    6.132580] scsi 1:0:0:0: Direct-Access     Generic  Ultra HS-COMBO   1.98 PQ: 0 ANSI: 0
[    6.147113] sd 1:0:0:0: [sdb] 30621696 512-byte logical blocks: (15.7 GB/14.6 GiB)
[    6.156332] sd 1:0:0:0: [sdb] Write Protect is off
[    6.162278] sd 1:0:0:0: [sdb] No Caching mode page found
[    6.168236] sd 1:0:0:0: [sdb] Assuming drive cache: write through

root@4200:~# mmc extcsd read /dev/sdb
ioctl: Invalid argument
Could not read EXT_CSD from /dev/sdb
root@4200:~# mmc status get /dev/sdb
ioctl: Invalid argument
Could not read response to SEND_STATUS from /dev/sdb

I'd love to be wrong....

smolka_J

@stephenw10 Looking at the same Redmine again it looks like Marcos M edited his first note recently in the last few days compared to the first several times I saw it there, now stating that it doesn't work as he first thought they found with the Linux version of it, so please disregard, will remove