Last Update: September 24, 2020 11:00am PT

Use this page for the latest updates about our netmap improvement efforts for OPNsense 20.7 kernels. You can find which drivers are safe to use with Sensei / Suricata in IPS mode.

Current Status on OPNsense 20.7.3

Use the following table for an updated status (Updated as of September 24, 2020 11:00am PT)

If your adapter is listed amongst the problematic drivers, it’s best to use 20.7.3-netmap kernel (see below to learn how to do that)

Other option is that you use Sensei with emulated netmap driver. See here to learn how to do that: Sensei Deployment modes

You can also test the new BETA OPNsense kernel which fixes these problems

Driver Systems used Status on OPNsense 20.7.3 Comments
vmx VMware guests Causes kernel panic with native netmap driver Use 20.7.3-netmap kernel or Use Sensei with emulated netmap driver 
vtnet QEMU, Proxmox guests + Google Cloud Causes kernel panic with native netmap driver Use 20.7.3-netmap kernel or Use Sensei with emulated netmap driver 
ixl Intel 10/25/40G network adapter Causes kernel panic with native netmap driver Use 20.7.3-netmap kernel or Use Sensei with emulated netmap driver 
ix Intel 10G network adapter Causes stalls with native netmap driver Use 20.7.3-netmap kernel or Use Sensei with emulated netmap driver 
em Intel 1G network adapter VLANs do not work with native netmap driver If using VLANs, Use 20.7.3-netmap
kernel or Use Sensei with emulated netmap driver use Sensei with emulated netmap driver
igb Intel 1G network adapter All working All working
mlx4en Mellenox ConnectX-3 10/40 GbE Working  – Problem reported with VLANs All working
re Realtek 1G network adapter All working All working
bce Broadcom 1G network adapter All working All working
Status of netmap on latest 20.7 release

How can we use the enhanced netmap support?

OPNsense shipped a netmap kernel which fixes these problems. To get the new kernel run below command:

# opnsense-update -kr 20.7.3-netmap

Follow the discussion about the netmap beta kernel here:

It’s highly likely that OPNsense will finally land this kernel with 20.7.4 or 20.7.5 release.

Keep in touch for more...

Follow us on Twitter, LinkedIn, Facebook, Youtube or subscribe to our newsletter to claim the first dibs on bleeding edge development:

Leave a Reply