Panic String: bpf_mcopy

erode · Feb 9, 2022, 3:51 PM

@stephenw10 Good morning Steve :) thanks for your time and your answer.
From what I can understand, according to the configuration I have, I already have off-loading disabled, am I right? look at this image:

We already had this enabled and we already restarted the computer several times with this option checked. The strange thing is that when doing the ifconfig -vm, it shows enabled on the 10 gb main board, and also on the vlans that are mounted on this board:

oce0: flags=8002<BROADCAST,MULTICAST> metric 0 mtu 1500
options=507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO>
capabilities=507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO>

(vlan:)

oce1.250: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
description: Solar
capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>

Sorry for the inconvenience, but from where else could I disable what you tell me? try doing it with: ifconfig oce1.250 -vlanhwtso -tso4 -tso -lro

but then when I run ifconfig -vm oce1.250 it still shows me the tso options, it doesn't change anything. Try to restart also after executing these commands by console, but I was not successful either, I still see them the same.

The question would be what would be the way to disable it? taking into account that I already have that option marked in the image that I showed you. Also, do you have any idea if the Emulex VFA5.2 2x10 GbE SFP + PCIe Adapter board supports pfsense? Is there a list of compatible motherboards so I can check?

Regarding what you tell me about mbuf, we have monitored the use with zabbix and it never reaches saturation. We have also raised the maximum value of mbuf to 1000000, and we also increased this value:

here we can see the use of the mbuf in the last 2 days, yesterday before 1 pm, the kernel panic occurred (a drop in the line is noted). but I understand that this would not be generating problems.

Steve, thank you very much in advance for your help.

stephenw10 · Feb 9, 2022, 4:53 PM

You still see those enabled on oce0 because it's not assigned and enabled in pfSense so no default settings are applied.

The vlans inherit their options from the parent interface so disable that vlan hardware offloading on oce1.

Steve

erode · Feb 9, 2022, 5:09 PM

@stephenw10

Thanks again Steve! the oce1 network card (emulex) has the lan network assigned, then I have mounted the other vlans on oce1 as well, I show you the configuration:

It's strange that it's not assigned and it's not applying the changes, since I have the option "hardware tcp segmentation offloading" and "hardware lardge recieve offloading" checked several weeks ago, and the server has been restarted several times.
When you tell me to disable hardware download in oce1, where should I do it? Since I understand that this is done by checking the "hardware tcp segmentation offloading" option in system -> advanced, is there any other way to do it? Thank you very much Steve, sorry for the inconvenience

stephenw10 · Feb 9, 2022, 5:20 PM

oce0 is not assigned though which is what you showed above.

I would not expect to see TSO or LRO enabled on oce1 since it is assigned.

Steve

erode · Feb 9, 2022, 5:24 PM

@stephenw10 Thanks Steve, sorry for the confusion! oce0 is currently disabled as we don't have any cables connected to this board as we don't plan to use it. Should I enable it anyway? I understand that if the vlans are in oce1 they should inherit from there, or if I need to assign plates, this off-loading option is not applied? thanks again Steve!!

stephenw10 · Feb 9, 2022, 6:06 PM

It should be applied there but I can't see because you haven't posted the ifconfig output showing oce1.

erode · Feb 9, 2022, 6:36 PM

@stephenw10 Sorry Steve, I'm sending you here the complete result of ifconfig -vm (I had to hide the ips, in case you see 11.11.11.11 on all boards)
Thank you for all this help you are giving us!

bge0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
	description: WANMETROTEL
	options=80098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,LINKSTATE>
	capabilities=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	ether bc:97:e1:86:00:60
	inet6 fe80::be97:e1ff:fe86:60%bge0 prefixlen 64 scopeid 0x1
	inet 11.11.11.11.59 netmask 0xfffffff8 broadcast 11.11.11.11.63
	inet 11.11.11.11.61 netmask 0xfffffff8 broadcast 11.11.11.11.63 vhid 5
	carp: MASTER vhid 5 advbase 1 advskew 0
	media: Ethernet autoselect (1000baseT <full-duplex>)
	status: active
	supported media:
		media autoselect mediaopt flowcontrol
		media autoselect
		media 1000baseT mediaopt full-duplex,master
		media 1000baseT mediaopt full-duplex
		media 1000baseT mediaopt master
		media 1000baseT
		media 100baseTX mediaopt full-duplex
		media 100baseTX
		media 10baseT/UTP mediaopt full-duplex
		media 10baseT/UTP
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
bge1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	capabilities=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	ether bc:97:e1:86:00:61
	media: Ethernet autoselect
	supported media:
		media autoselect mediaopt flowcontrol
		media autoselect
		media 1000baseT mediaopt full-duplex,master
		media 1000baseT mediaopt full-duplex
		media 1000baseT mediaopt master
		media 1000baseT
		media 100baseTX mediaopt full-duplex
		media 100baseTX
		media 10baseT/UTP mediaopt full-duplex
		media 10baseT/UTP
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
bge2: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	capabilities=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	ether bc:97:e1:86:00:62
	media: Ethernet autoselect
	supported media:
		media autoselect mediaopt flowcontrol
		media autoselect
		media 1000baseT mediaopt full-duplex,master
		media 1000baseT mediaopt full-duplex
		media 1000baseT mediaopt master
		media 1000baseT
		media 100baseTX mediaopt full-duplex
		media 100baseTX
		media 10baseT/UTP mediaopt full-duplex
		media 10baseT/UTP
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
bge3: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	capabilities=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	ether bc:97:e1:86:00:63
	media: Ethernet autoselect
	supported media:
		media autoselect mediaopt flowcontrol
		media autoselect
		media 1000baseT mediaopt full-duplex,master
		media 1000baseT mediaopt full-duplex
		media 1000baseT mediaopt master
		media 1000baseT
		media 100baseTX mediaopt full-duplex
		media 100baseTX
		media 10baseT/UTP mediaopt full-duplex
		media 10baseT/UTP
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce0: flags=8002<BROADCAST,MULTICAST> metric 0 mtu 1500
	options=507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO>
	capabilities=507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO>
	ether 00:10:9b:9d:2f:60
	media: Ethernet autoselect
	status: no carrier
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: LAN
	options=500b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO>
	capabilities=507bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1 prefixlen 64 scopeid 0x6
	inet 11.11.11.11.200 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.204 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 2
	carp: MASTER vhid 2 advbase 1 advskew 0
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
	plugged: SFP/SFP+/SFP28 10G Base-LR (LC)
	vendor: OEM PN: SFP+-10G-BX20-D SN: 202105060164 DATE: 2021-05-06
	module temperature: 46.54 C Voltage: 3.32 Volts
	RX: 0.81 mW (-0.90 dBm) TX: 1.12 mW (0.49 dBm)
bge4: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
	description: WAN_CLARO
	options=80098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,LINKSTATE>
	capabilities=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	ether 7c:8a:e1:ce:b8:46
	inet6 fe80::7e8a:e1ff:fece:b846%bge4 prefixlen 64 scopeid 0x7
	inet 11.11.11.11.194 netmask 0xfffffff8 broadcast 11.11.11.11.199
	inet 11.11.11.11.197 netmask 0xfffffff8 broadcast 11.11.11.11.199 vhid 1
	inet 11.11.11.11.198 netmask 0xfffffff8 broadcast 11.11.11.11.199 vhid 12
	carp: MASTER vhid 1 advbase 1 advskew 0
	carp: MASTER vhid 12 advbase 1 advskew 0
	media: Ethernet autoselect (1000baseT <full-duplex>)
	status: active
	supported media:
		media autoselect mediaopt flowcontrol
		media autoselect
		media 1000baseT mediaopt full-duplex,master
		media 1000baseT mediaopt full-duplex
		media 1000baseT mediaopt master
		media 1000baseT
		media 100baseTX mediaopt full-duplex
		media 100baseTX
		media 10baseT/UTP mediaopt full-duplex
		media 10baseT/UTP
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
bge5: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
	description: SYNC
	options=80098<VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,LINKSTATE>
	capabilities=c019b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO,LINKSTATE>
	ether 7c:8a:e1:ce:b8:47
	inet6 fe80::7e8a:e1ff:fece:b847%bge5 prefixlen 64 scopeid 0x8
	inet 10.0.1.1 netmask 0xfffffffc broadcast 10.0.1.3
	media: Ethernet autoselect (1000baseT <full-duplex>)
	status: active
	supported media:
		media autoselect mediaopt flowcontrol
		media autoselect
		media 1000baseT mediaopt full-duplex,master
		media 1000baseT mediaopt full-duplex
		media 1000baseT mediaopt master
		media 1000baseT
		media 100baseTX mediaopt full-duplex
		media 100baseTX
		media 10baseT/UTP mediaopt full-duplex
		media 10baseT/UTP
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
enc0: flags=41<UP,RUNNING> metric 0 mtu 1536
	groups: enc
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	capabilities=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0xa
	inet 127.0.0.1 netmask 0xff000000
	inet 11.11.11.11.1 netmask 0xffffffff
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
pflog0: flags=100<PROMISC> metric 0 mtu 33160
	groups: pflog
pfsync0: flags=41<UP,RUNNING> metric 0 mtu 1500
	pfsync: syncdev: bge5 maxupd: 128 defer: off
	syncok: 1
	groups: pfsync
oce1.150: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: Servers
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.150 prefixlen 64 scopeid 0xd
	inet 11.11.11.11.2 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.4 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 4
	groups: vlan
	carp: MASTER vhid 4 advbase 1 advskew 0
	vlan: 150 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.180: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> metric 0 mtu 1500
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.180 prefixlen 64 scopeid 0xe
	groups: vlan
	vlan: 180 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.200: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: VoIP
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.200 prefixlen 64 scopeid 0xf
	inet 11.11.11.11.2 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.4 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 7
	groups: vlan
	carp: MASTER vhid 7 advbase 1 advskew 0
	vlan: 200 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.250: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: Solar
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.250 prefixlen 64 scopeid 0x10
	inet 11.11.11.11.2 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.4 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 10
	groups: vlan
	carp: MASTER vhid 10 advbase 1 advskew 0
	vlan: 250 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.300: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: WiFi
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.300 prefixlen 64 scopeid 0x11
	inet 11.11.11.11.2 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.5 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 8
	groups: vlan
	carp: MASTER vhid 8 advbase 1 advskew 0
	vlan: 300 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.310: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> metric 0 mtu 1500
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.310 prefixlen 64 scopeid 0x12
	groups: vlan
	vlan: 310 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.400: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: Camaras
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.400 prefixlen 64 scopeid 0x13
	inet 11.11.11.11.2 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.4 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 11
	groups: vlan
	carp: MASTER vhid 11 advbase 1 advskew 0
	vlan: 400 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.600: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
	description: Printers
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.600 prefixlen 64 scopeid 0x14
	inet 11.11.11.11.2 netmask 0xffffff00 broadcast 11.11.11.11.255
	inet 11.11.11.11.4 netmask 0xffffff00 broadcast 11.11.11.11.255 vhid 6
	groups: vlan
	carp: MASTER vhid 6 advbase 1 advskew 0
	vlan: 600 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.700: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> metric 0 mtu 1500
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.700 prefixlen 64 scopeid 0x15
	groups: vlan
	vlan: 700 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
oce1.333: flags=8043<UP,BROADCAST,RUNNING,MULTICAST> metric 0 mtu 1500
	capabilities=703<RXCSUM,TXCSUM,TSO4,TSO6,LRO>
	ether 00:10:9b:9d:2f:68
	inet6 fe80::210:9bff:fe9d:2f68%oce1.333 prefixlen 64 scopeid 0x16
	groups: vlan
	vlan: 333 vlanpcp: 0 parent interface: oce1
	media: Ethernet autoselect (10Gbase-SR <full-duplex>)
	status: active
	supported media:
		media autoselect
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
ovpns1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
	options=80000<LINKSTATE>
	capabilities=80000<LINKSTATE>
	inet6 fe80::be97:e1ff:fe86:60%ovpns1 prefixlen 64 scopeid 0x17
	inet 11.11.11.11.1 --> 11.11.11.11.2 netmask 0xffffff00
	groups: tun openvpn
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
	Opened by PID 36943
ovpns2: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
	options=80000<LINKSTATE>
	capabilities=80000<LINKSTATE>
	inet6 fe80::be97:e1ff:fe86:60%ovpns2 prefixlen 64 scopeid 0x18
	inet 11.11.11.11.1 --> 11.11.11.11.2 netmask 0xffffff00
	groups: tun openvpn
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
	Opened by PID 71363

stephenw10 · Feb 9, 2022, 6:39 PM

@erode said in Panic String: bpf_mcopy:

oce1: flags=8143<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> metric 0 mtu 1500
description: LAN
options=500b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO>

I'm sorry you did actually post that already above.

But, that's what I expect to see. The TSO and LRO options are disabled already.

The VLAN hardware options are not though which is why I suggested disabling them manually as a test.

Steve

erode · Feb 10, 2022, 3:20 PM

@stephenw10 Hi Steve, good morning! How are you? thanks for taking the time to help me :)

I tried to disable TSO4,TSO6 and LRO in vlan oce1.310, first I did an ifconfig -vm oce1.310 so you can see how its status is, then I ran the ifconfig commands oce1.310 -tso4 (and others) and then run ifconfig -vm oce1.310 again so you can see how it looks.

What I notice is that when I run ifconfig to remove the tso and lro options, it doesn't apply the changes. It is worth clarifying that I saw how to do this in the freebsd documentation that explains everything (https://www.freebsd.org/cgi/man.cgi?ifconfig)

Here's a picture of what I did so you can see it:

Am I correct or am I doing the procedure wrong? This has me a bit lost, we have spent a lot of money to be able to buy two computers and use pfsense, but so far your help is a great guide for me. Thank you!

stephenw10 · Feb 10, 2022, 3:25 PM

You need to do that on oce1 directly not the VLANs on it.

erode · Feb 10, 2022, 4:06 PM

@stephenw10 Thanks Steve! this is the result in the oce1:

It seems that it is not applying either :(

stephenw10 · Feb 10, 2022, 5:45 PM

No TSO and LRO are already disabled on oce1. You need to check oce1 again after disabling the VLAN hardware off loading.

The output from the vlan interfaces is just listing the capabilities not what's actually enabled.

Steve

erode · Feb 10, 2022, 6:27 PM

@stephenw10 I do it this way and this is the result, should I do it another way?

On the other hand, you know that looking at the boot log, I found this on the computer:

apei0: <ACPI Platform Error Interface>

Do you think it could be something relevant? appears at startup, but once it starts, the computer can go several days without doing the dump until it does. this week he did it twice.

Thanks!

stephenw10 · Feb 10, 2022, 6:43 PM

Hmm, well that doesn't appear to have disabled VLAN HW TSO as an option for some reason.
The other things were already disabled, there's no need to disable them again there.
Try any of the other VLAN HW options.

ACPI errors are unfortunately common. Manufacturers often only test Windows and the BIOS tables can be full of errors for other OSes.

Steve

erode · Feb 10, 2022, 7:21 PM

@stephenw10 Steve, I'm checking on IRC in the FreeBSD community and they tell me that there is an error to disable vlan_hwtso on oce network cards, and several people tell me that it's not the best option for freebsd/pfsense... what do you think? Is it really incompatible or is it a configuration issue? I'm out of ideas :(

thank you!!!

stephenw10 · Feb 10, 2022, 7:43 PM

The Emulex card? I agree, if you can swap it out I would do that. It's not a commonly used NIC so issues that exist with it can go undiscovered.

Steve

erode · Feb 10, 2022, 9:38 PM

@stephenw10 Steve, I promise this is the last question I'll ask you until I change the board (and hopefully that will resolve it).

The board I have is brand 10GTEK; Model X520-10G-1S-X8 ; PCIe 2.0 X8 and it has an Intel 82599 chipset, it's 1x SFP+ 10GbE. is it a good board for pfsense? From already thank you very much!!!

stephenw10 · Feb 10, 2022, 10:08 PM

I would expect that to be fine. X520 is quite common.