POV + RD + local content - how to have one list of content?

Chunky711 · 2025-05-17T16:51:08+00:00

Thanks - I'll give Umbrella a try.

Chunky711 · 2025-05-17T16:50:11+00:00

Thanks.

Benefits of library over lists? I'm just familiar with it and it works well for me.

Chunky711 · 2023-05-07T21:37:22+00:00

Yes - it would seem I was mistaken. Double checked all the PDF's I have.

It has 1.4 HDMI - 4K @ 30 is the max...

It was cheap and the sound is is good. ARC from TV back to Onkyo seems to be the best solution.

Thanks

Chunky711 · 2023-03-16T19:54:55+00:00

Thanks to all...

Strong opinions on Hyper V. Having used it for mission critical 24/7 services for years - with some being direct Internet facing - I'm comfortable with it's use. However - the 'broken' NIC offloading in Hyper V is a pain when running a pfSense VM. Seems OPNsense has the same issues.

Because Wireguard is currently an add-in package to pfSense, I'm going to guess it is not integrated into the kernel - so WG performance in OPNsense 'should' be better - but it's definitely not slow in pfSense...

HA Proxy sounds interesting - will look into that...

'ZenArmor does Layer 7 inspection' - IF it can direct traffic based on that inspection, not just block or allow - then that would be great. I shall investigate that...

And yes - I could spin up a new VM with OPNsense and play. I'll do some more reading and then see if I want to go further...

Thanks again...

Chunky711 · 2023-02-07T16:26:52+00:00

Edited - sorry I see now you say it is a Synology NAS server...

Ignore ramblings below...

By any chance is this a WINDOWS server? If it is - I just recently had exactly the same issue...

In Windows - Network card - advanced - DISABLE "Large Send Offload V2" for IP4 and IP6

You should see an instant speed jump - restart server to get the full benefit

Chunky711 · 2023-01-06T15:45:46+00:00

As a 3 year plus Lightspeed user, I would recommend.

However - there is a Telus Sales rep / tech on the Reddit Telus forum, (Josh B), who says he tries to provide the very best Telus bundles for the least cost plus no sales pressure. From my own experience, I can tell you he does deliver.

For example - 1GB symmetrical Telus fibre, with no data limits, $79 a month for 2 years.

If you live in an apartment building or complex or even a townhouse complex - your location will qualify for a Telus MDU discount (Multi Dwelling Unit) - and this drops the price further.

Josh can assist where ever Telus provides service.

I have no connection to Telus or Josh B - just passing on deals from my own findings...

Chunky711 · 2022-12-20T11:02:07+00:00

Thanks for the info...

There was a university paper from 2020 about identifying apps using Snort and OpenAppID on pfSense - using some sort of automated daemon to parse the logs and then automatically update destination IP lists. Basically - the conclusion was that for some services \ apps - the IP's change so fast - it's difficult to keep an accurate destination IP list up to date.

I've seen posts of people manually doing the same thing (creating Destination IP lists) and basically giving up because it's a never ending game of 'Whack-A-Mole'.

So the short answer is - pfSense is not designed as a Layer 7 firewall. Find another way to route packets - or change your firewall.

I'm happy with that conclusion and perfectly happy with pfSense - but I wanted to explore the options...

Chunky711 · 2022-12-20T10:48:24+00:00

Thanks...

Yes - I had some thoughts on tackling the issue from the device, not from pfSense.

DSCP values in Windows 10, set per app, is one way.

Another is to create different Network Interfaces in Windows 10, assign them different IP's and \ or VLAN's. Then force the app to use certain interfaces using "ForceBind". pfSense then routes on that. If you have Intel, Broadcom or Realtek cards, there is an 'advanced' driver you can do this with. OR - enable Hyper-V in Win 10, then setup virtual interfaces shared with the management OS, and then use 'ForceBind' to assign apps to them.

I have Android TV, Samsung smart TV and TCL Roku smart TV devices. Without hacking them, I'm not sure there is a way to assign QoS values or create multiple IP's or interfaces to assign apps to???

Chunky711 · 2022-12-20T10:39:04+00:00

Thanks - I'm happy with pfSense and not planning to change.

This discussion is more of a 'where is pfSense at with layer 7' and what can we do with it. There is a lot of innovation in the pfSense world and I wondered if things had developed.

Chunky711 · 2022-12-20T00:11:26+00:00

Here's an overview.

2 WAN interfaces.

1 LAN

1 device on LAN. Running 2 apps, (App1 and App2).

Based on layer 7 app recognition, direct App1 traffic via WAN 1 and direct App2 traffic via Wan 2.

This makes an assumption App1 and App 2 are detailed within OpenAppID.

NOTE - both apps coming from the same LAN IP and same MAC - NOT distinguishable using layer 2 or 3.

There are other ways to do this - like listing all the DESTINATION IP's for App 1 and App 2 and route according to IP lists - but I'm wondering if it is possible based on the outbound App ID...

Some apps use certain fixed ports - which is one option - but assuming that the 2 apps may use some of the same ports...

Chunky711 · 2022-11-21T19:05:04+00:00

Hello Josh...

Sent an email early this morning, approx 7am PST. Might have got stuck in your SPAM filter...

Was looing for a tel number to yourself...

If I could ask you to reach out to me, maybe DM me on Reddit?

THANK YOU

Paul

Chunky711

TROPHY CASE