-
Hmm, I'll try to swap out the Intel CT with the I210. The weird part is that the system was stable on older hardware with the same NICs, the system was based on an AMD A8-7600 Kavari (Steamroller). Unfortunately the motherboard started flaking out on that system though, which lead to the Ryzen rebuild. Right now with MSI interrupts the system seems stable for about 2 to 3 days but now experiences hard crashes where I get no crash reports.
Extended 12 hour memtest run came up with no errors, so I'm fairly certain hardware is good in this case. I'm starting to wonder if it's just Ryzen and FreeBSD bugs creeping up that I'm hitting.
-
@Zermus said in Ryzen 3 2200G randomly crashing:
Hmm, I'll try to swap out the Intel CT with the I210. The weird part is that the system was stable on older hardware with the same NICs, the system was based on an AMD A8-7600 Kavari (Steamroller). Unfortunately the motherboard started flaking out on that system though, which lead to the Ryzen rebuild. Right now with MSI interrupts the system seems stable for about 2 to 3 days but now experiences hard crashes where I get no crash reports.
Extended 12 hour memtest run came up with no errors, so I'm fairly certain hardware is good in this case. I'm starting to wonder if it's just Ryzen and FreeBSD bugs creeping up that I'm hitting.
That's a good point - I wonder if support / stability will improve with FreeBSD 12.0 (which pfSense 2.5 will use).
-
Try a snapshot and see if it's still crashing in 2.4.4. I have several boxes running 2.5 snaps here without issue currently. Though they are still just code snapshots so things might break.
Steve
-
So I think I've fixed this by trial and error network tuning. I might make a separate thread for fine tuning NTP node or heavy UDP traffic behind pfSense. I'm using an Intel I210 (igb driver) as my WAN (Referred to me as a previous fix in this thread, but I could probably have kept the Gigabit CT in) and 1 port on an Intel X520-DA2 (ix driver) as my LAN. So far with this setup I've been running 3 days stable. I'll update with any further tuning updates if the need arises.
Under System -> Advanced -> Networking I have:
Hardware Checksum Offloading unchecked. (Enabled)
Hardware TCP Segmentation Offloading checked. (Disabled)
Hardware Large Receive Offloading checked. (Disabled)kern.ipc.nmbclusters="1000000" kern.ipc.nmbjumbop="524288" hw.igb.max_interrupt_rate="32000" hw.ix.max_interrupt_rate="32000" net.isr.maxthreads="-1" net.isr.bindthreads="1" net.pf.source_nodes_hashsize="1048576"NOTE: hw.igb and hw.ix are specific to my NIC drivers, so you might have to tune these to your own NIC hardware.
-
@Zermus - Glad things are more stable now. I do think the I210 is a superior card / chipset compared to the CT, but did you ever try plugging the CT back in to see if the instability issues returned?
-
so not a cpu issue?
-
Nope, well sorta. I just had to fine tune the hell out of the kernel to deal with the NTP traffic. I left the i210 in the box, but I'm guessing either card would have worked. Going on 90 days uptime now.
Here is what I ended up with on /boot/loader.conf.local
hw.igb.max_interrupt_rate="216000" hw.ix.max_interrupt_rate="216000" hw.igb.rxd=2048 hw.igb.txd=2048 hw.ix.rxd=2048 hw.ix.txd=2048 net.isr.maxthreads="-1" net.isr.bindthreads="1" net.pf.states_hashsize="2097152" net.pf.source_nodes_hashsize="1421000" -
have a 3200g system up and running with intel lan cards. so far so good,
-
You should be fine with a standard amount of connections with default settings, like below 15,000. You're currently using 1,895. I average 100k-250k UDP connections every second, on top of my normal traffic around like 1-5k, which is why I needed to fine tune so much.
-
my build @ https://forum.netgate.com/topic/147507/successful-pfsense-ryzen-3200g-build-success
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.