I was looking and it seems like my Cisco 150ax APs support the Cisco Dashboard as well. I may be able to tie all the hardware into one view. I ran Cisco's Findit software way back when, before I turned off my rack and I had no servers to run it on. If I start using my Windows 11 workstation as my NAS maybe I can tie in Cisco Dashboard. I don't know enough to do it right now, but maybe.
Using pfSense with a L3 core switch
- Thread starter unmesh
- Start date
I have been running resolver for several weeks maybe a month but recently it has developed a pause running resolver using Microsoft's default web page. I do use DNSSEC with QUAD9. It was working faster when I first tested it.
I switched back to DNS forwarding and it is not as fast but is smooth and consistent without a pause.
Anybody seen this using Windows 11?
I switched back to DNS forwarding and it is not as fast but is smooth and consistent without a pause.
Anybody seen this using Windows 11?
sfx2000
Part of the Furniture
Not running windows 11, but I've seen similar behavior on Win10 and earlier - DNS cache can get stale, so sometimes it helps to clear it on the PC that is seeing the problem...
It's easy enough - just pop open a command shell and type
ipconfig /flushdns
That usually does the trick - esp these days where all the major providers are running their own CDN's...
sfx2000
Part of the Furniture
Surprised nobody responded here - I would say that anyone that is doing more than just basic routing is going to have some sort of managed switch in play...
When I was running pfSense, I used a Netgear GS-108T, which is layer 3 - not a fully featured as the Cisco L3 switches, but more than enough for my purposes...
I have "Serve cache records even with TTL of 0" set which should refresh them in background using resolver.
So, I have been thinking about the 180ms encryption do you think it had anything to do with using a Broadcom NIC? I am now using an Intel NIC and I am not seeing the high delay? I am also using a 6 gen motherboard which is newer than the older motherboard. The clock rates are about the same on the CPU 3.2 vs 3.4.
So, a few weeks ago we had a power outage. My whole house went quiet. I was on my laptop doing what I do online, and it was still working. I just kept working online with no interruptions. So did my wife using her Apple Air. It is nice to have an APC backup solution. Ater 10 minutes or so the power came back on, and the house fired up with everything running. I have a large house with 3 wireless APs. My wife was in the back part of my house.
Our power company has been having issues since we have been over 106 degrees every day keeping up with power demand. They have asked to conserve so we have out thermostat set at 80 degrees. It is high yes, but it is a 26 degree difference with outside so it still feels cool. I use ceiling fans also when you are in the room.
I did notice my router is running 1 to 2 degrees higher in temperature with the thermostat set at 80.
Our power company has been having issues since we have been over 106 degrees every day keeping up with power demand. They have asked to conserve so we have out thermostat set at 80 degrees. It is high yes, but it is a 26 degree difference with outside so it still feels cool. I use ceiling fans also when you are in the room.
I did notice my router is running 1 to 2 degrees higher in temperature with the thermostat set at 80.
Last edited:
Riko
Occasional Visitor
I use unbound for locale dns queries. In unbound settings i switched on forward and tls mode.
Then you configure some TLS supported dns servers.
Make sure you alsof add de domain names of those dns servers
like so
After that all your dns traffic is TLS encrypted.
Riko
Occasional Visitor
I agree.
If you use a L3 switch you need access control lists (ALCs) with limited options to filter traffic.
For a small SOHO netwerk a router on a stick works well.
If you want to use several (v)LANs creating a multi port LAG between the router and the switch for inter vlan routing works great.
I use 2x 2.5 mbps nics (i225) in a LACP LAG to my switch.
Last edited:
That is the fun of running your own network. I am back to forwarding instead of resolver as I keep hitting slowdowns after a month or so. This has happened to me on 2 different Dell PCs and different NICs. I am not into using any port for DNS other than port 53 so TLS is out for me. And I won't use Cloudflare for anything.
I have no problem using ACLs on my layer3 Cisco switch. At least if I make a mistake I don't open up my firewall. Plus, the L3 switch is faster than using a separate router regardless of bandwidth. Just think out the traffic path for both.
PS
I will try resolver again after the new pfsense upgrade. Plus, I plan to add an IDS.
Last edited:
sfx2000
Part of the Furniture
That's still kind of weird... I acknowledge that you're observing this, and I'm not sure why you'd be seeing the slowdowns.
DNS Resolver = unbound
DNS Forwarder = dnsmasq
Both are pretty robust and stable - and you're not running TLS, so that's even more odd... To fix it, I suppose just reload the daemon (whichever is in use), and that should flush the caches..
Have you set up logging on the queries to see where the delays may be?
I have no issue with DNS Forwarding. It just works. It is DNS Resolver that I see the slowdowns after a while. I only use QUAD9 for DNS. I am not interested in trying a different DNS. It sounds like work. I will turn on logging with the next release.That's still kind of weird... I acknowledge that you're observing this, and I'm not sure why you'd be seeing the slowdowns.
DNS Resolver = unbound
DNS Forwarder = dnsmasq
Both are pretty robust and stable - and you're not running TLS, so that's even more odd... To fix it, I suppose just reload the daemon (whichever is in use), and that should flush the caches..
Have you set up logging on the queries to see where the delays may be?
To fix the slowdowns with resolver I just switch to forwarding. A little slower but no pauses when it is acting up, so it is faster when I am seeing the issues.
Riko
Occasional Visitor
pfSense Software Types
Explore our subscription table below. Find the option that is best for you. Check out our Subscriptions FAQ for more detail.
www.netgate.com
Christos
Regular Contributor
I'm afraid it is $400 per year, not $129.
In comparison, Mikrotik asks for $45 if you want the ISO image to install on your own hardware.
Yea, the only thing that changed is TAC support? I can live with that as I only use it at home and I get enough support on this site and the pfsense forums that I am good.
If I was a business, I would pay for support as I would not want down time plus I would buy pfsense hardware just to make sure I had good working hardware.
Similar threads
Similar threads
Similar threads
-
Using 2 routers (no bridge), DDNS configuration not working
- Started by cetiberiojr
- Replies: 3
-
Long shot but worth a shot? WFH using CISCO phone audio delay 5-10 seconds
- Started by bknox87
- Replies: 1
-
-
-
-
-
pfSense vs. OPNsense AFA offloading logging, database etc to other hardware
- Started by slackjaw99
- Replies: 4
-
-
-