Kern.random.* tunable change

left4pook · Oct 30, 2017, 3:41 PM

Hi,

Just noticed that random (entropy) tunables have changed from FreeBSD 10 -> 11. In System / Advanced / System Tunables, 2.4.1 and 2.4.2-dev are trying to turn off:

kern.random.sys.harvest.interrupt
kern.random.sys.harvest.point_to_point
kern.random.sys.harvest.ethernet

These tunables no longer exist, however. Instead, a mask is used:

kern.random.harvest.mask: 351

Which results in the same:

kern.random.harvest.mask_symbolic: [UMA],[FS_ATIME],SWI,[INTERRUPT],NET_NG,[NET_ETHER],NET_TUN,MOUSE,KEYBOARD,ATTACH,CACHED

Currently, 2.4.1 and 2.4.2-dev select all entropy sources, which would result in a performance hit.

luckman212 · Oct 31, 2017, 4:28 AM

Looks like a fix for that has just been committed :)
https://github.com/pfsense/pfsense/commit/c3938c16e3ba66e6911590653a775423371b4a3a