Alix 2d13 and OpenBSD 6.5 Problems
Hi. I’m hoping someone either has a cluebat or some helpful suggestions beyond “reinstall”. I had an alix 2d13 running OpenBSD 6.3. I finally got around to upgrading to 6.4 (via https://www.openbsd.org/faq/upgrade64.html), and that seemed to go just fine (I used the Upgrading Manually section, since I don’t have (easy) access to the console). I let that run for a day, just to make sure all was well, and then attempted an upgrade to 6.5 (via https://www.openbsd.org/faq/upgrade65.html), again using the “Upgrading Manually” section. This time, between smtpd and relinking the kernel, it appears my Alix board is quickly running out of memory. Within a few seconds the sr rate is in the 20K range. I stopped the ld for relinking, and killed SMTPD in order to finish the install (the makedev ALL, sysmerge, pkg_update -u bits), and that all ran fine. But about 15-20 minutes after a reboot, the box just goes off the network, and there’s not much I can do. I can download and reinstall 6.5, but was hoping to avoid that pain, but I just want to make sure 6.5 has no issues on the Alix boards. . . Thanks! I’d attach dmesg, but the box is dead again. . . If anyone wants to dive into what’s going on, just let me know what info you want to see. Sean
Re: experience with supermicro based Network Devices for 1Gb/s Ipsec throughput
On 2019-10-01, Lyndon Nerenberg wrote: > Hello All, > > doing a project for a large client and I would like to know if anyone > has > any issues running. > supermicro with SOC CPUS models > SYS-5019A-FTN4 > SYS-5018A-FTN4 As reported previosly by others make sure you have a good warranty as the chipset will fail randomly. I still have 4 of those but all of them have been replaced at least once or twice under the warranty. > SYS-1018D-FRN8T > SYS-5018D-FN8T I have two SYS-5018D-FN4T. One of them works flawlessly. However one of them needs cold boot to work properly as the one of two 10Gigabit interfaces shuts down due to the "overheating issue" as I reported by me https://marc.info/?l=openbsd-misc&m=155789695701876&w=2 also seen by others https://tinkertry.com/how-to-work-around-intermittent-intel-x557-network-outages-on-12-core-xeon-d Cheers, Predrag > SYS-5018A-FTN4 > > or if there are other Atom / xeon embedded processor /systems that you > would recommend, > > we are running Pcengines APU2s in the branch offices... but I want more > Umph > in the data centres that the tunnels will all be terminating into ... > > All suggestions welcome.. including boards / lan chipsets to avoid > Thanks > > > > -- > Kindest regards, > Tom Smyth.
Re: experience with supermicro based Network Devices for 1Gb/s Ipsec throughput
On 2019-10-01, Lyndon Nerenberg wrote: >> doing a project for a large client and I would like to know if anyone has >> any issues running. >> supermicro with SOC CPUS models > >> SYS-5018A-FTN4 > > If you have any of these, replace them. They have known buggy CPUs > and will randomly fail without warning. We replaced about a dozen > of them after >50% failed within the first year of installation. Seconded. > Note this isn't an OpenBSD problem -- the 5018As are just bad hardware. > (They also have APIC interrupt issues, most likely due to a buggy ACPI > implementation.) > > We replaced all our SYS-5018A-FTN4s with SYS-5018D-FN8Ts. I am fairly happy with SYS-5018D-FN8T. My main gripe is that they didn't put the serial port on the front panel, it's only on a motherboard header which is under where the PCIE card sits. The only simple way to take it out of the box ends up losing you the PCIE slot. My usual warning, with the IPMI controller, make sure you set it to dedicated LAN only. Otherwise it will silently share the first motherboard LAN if the management port is not plugged in. Even if you don't plan to use it (maybe *especially* if you don't plan to use it) you don't want that open to unfiltered traffic. > I can't speak to the other models you mentioned. > > As for network throughput, we did test a pair of 5018As with 10-gig > NIC cards. They were able to sustain a bit over 750 MB/s throughput > on ttcp tests, so this class of Supermicro will certainly shovel the > packets across the network. I don't know how much of a hit you will > take with IPsec, but we ran our TLS-terminating load balancers on the > 5018As before replacing them, and they had no trouble keeping up with > a saturated 1-gig NIC worth of TLS connections. The replacement 5018Ds > just loaf along. > > [ All the above gear was/is running the at-the-time current 'release' > version of OpenBSD. ] > > --lyndon > >
Re: experience with supermicro based Network Devices for 1Gb/s Ipsec throughput
> doing a project for a large client and I would like to know if anyone has > any issues running. > supermicro with SOC CPUS models > SYS-5018A-FTN4 If you have any of these, replace them. They have known buggy CPUs and will randomly fail without warning. We replaced about a dozen of them after >50% failed within the first year of installation. Note this isn't an OpenBSD problem -- the 5018As are just bad hardware. (They also have APIC interrupt issues, most likely due to a buggy ACPI implementation.) We replaced all our SYS-5018A-FTN4s with SYS-5018D-FN8Ts. I can't speak to the other models you mentioned. As for network throughput, we did test a pair of 5018As with 10-gig NIC cards. They were able to sustain a bit over 750 MB/s throughput on ttcp tests, so this class of Supermicro will certainly shovel the packets across the network. I don't know how much of a hit you will take with IPsec, but we ran our TLS-terminating load balancers on the 5018As before replacing them, and they had no trouble keeping up with a saturated 1-gig NIC worth of TLS connections. The replacement 5018Ds just loaf along. [ All the above gear was/is running the at-the-time current 'release' version of OpenBSD. ] --lyndon
experience with supermicro based Network Devices for 1Gb/s Ipsec throughput
Hello All, doing a project for a large client and I would like to know if anyone has any issues running. supermicro with SOC CPUS models SYS-5019A-FTN4 SYS-5018A-FTN4 SYS-1018D-FRN8T SYS-5018D-FN8T SYS-5018A-FTN4 or if there are other Atom / xeon embedded processor /systems that you would recommend, we are running Pcengines APU2s in the branch offices... but I want more Umph in the data centres that the tunnels will all be terminating into ... All suggestions welcome.. including boards / lan chipsets to avoid Thanks -- Kindest regards, Tom Smyth.
