From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bCsXr1Lghz32yZ for ; Thu, 5 Jun 2025 17:54:52 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bCsXm4r8Fz2yVK for ; Thu, 5 Jun 2025 17:54:48 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4bCsXl3v8Gz4gB; Thu, 5 Jun 2025 17:54:47 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1749146087; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=JUZj4EH0m2e2vTFSdaxdFfNQKSMeKvBXZjLzNlyH1rA=; b=9k3Fj3wqac2vW6DaddSxgf821nNk9u5ssh/WM/H+MCpBsBhKfP/qzd/i95q5811yOLbi49 R3+yX1Xk/FzNH7Bg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1749146087; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=JUZj4EH0m2e2vTFSdaxdFfNQKSMeKvBXZjLzNlyH1rA=; b=WNIsz0Y4FypLrsSYdjc9601A+TqwNOJrKFWA1rdoesHSxgy7TSU4pKV+IHbV/peQzhMQWf ouknVtCmJ5binJUeEUFL/yBCDuFfq98Dhq99Twgs7jah/HAekjfkRZ5IbWmoy16ALFzEhv NHdNbuTs+KTyP76nTIZgOtATOB7WFVuGwW99UNm5at06FviuWDynMxeAoS7sSLpVeVhWfi 689HTShP6mZK/IaRAr9iR0F04vMBOgBkpueE/0xMRj/12upXzF4S+DuTwXH14+CuZ3j3qN cE5ldmSuJh8c2FVERl5LxoYLZ+UPvot+6C2fTYzYaIhKP0cWLejISLTGxSZPeA== Content-Type: text/plain; charset=us-ascii Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: Mime-Version: 1.0 Subject: Re: Size of memory that can be used with old IPFire Prime systems From: Michael Tremer In-Reply-To: <1c1c2be1-55c6-4c01-aa20-3bfb77a7faf4@ipfire.org> Date: Thu, 5 Jun 2025 18:54:46 +0100 Cc: development@lists.ipfire.org Content-Transfer-Encoding: quoted-printable Message-Id: <81050E6D-F3CA-4ED2-BDB9-1747D17D0651@ipfire.org> References: <78AF3322-80B6-4C32-BE40-49303EF7B1FB@ipfire.org> <80ad31de-7eb1-4266-9f76-7de665db60a1@sandyindustries.com> <83d13e40-2de6-4049-8d1e-2a6757ff055e@ipfire.org> <1c1c2be1-55c6-4c01-aa20-3bfb77a7faf4@ipfire.org> To: Adolf Belka Hello, > On 5 Jun 2025, at 12:55, Adolf Belka wrote: >=20 > Hi Michael, >=20 > On 05/06/2025 12:42, Michael Tremer wrote: >> Hello Adolf, >> If the Prime appliance is not suitable for testing any more, I am = sure we can find you something else. >=20 > It can still be used for testing and even for some bug development. It = is just that with the IPS enabled, that uses 1.4GB on its own so the = memory usage is around 88% to 94%. I have noticed that Suricata has become very memory hungry recently, = too. I think it is since we upgraded to version 7, but I did not verify = this. > So doing something like a change to the IPS rulesets that are enabled = ends up going into something like 20% swap usage and trying to access = the Prime via SSH has ended up at 35% swap usage just now when I tested = it. > The impact of the swap usage is just that everything ends up going = very slow. This appliance is already very slow and the disk-on-module is not super = fast either. This is not fun to use. > Disabling the IPS resolves the swap usage because the memory level is = then down at 50% or less. >=20 >> What would you need? >=20 > I don't really know. I find it good to be able to do testing on both = vm and physical hardware and the definite benefit of the Prime is that = it has a wifi connection so I can test out the hostapd element of = IPFire, which I can't on the vm systems. >=20 > I have thought on and off about replacing my "production" old mini = appliance with one of the new mini appliances and then I could use the = old mini appliance for testing etc although it doesn't have a wifi = connection. We can fix that. I am sure I have a spare WiFi module somewhere around. = Are you using WiFi in your production appliance? > Until I get to a point to getting the new mini appliance the Prime = definitely is of benefit to my testing. >=20 > Maybe I use the vm systems for IPS e\valuations and disable it on the = Prime. That would probably help with the memory and performance. > That's a good idea. I will give that a test out and see how things go. Best, -Michael > Regards, > Adolf. >=20 >> -Michael >>> On 5 Jun 2025, at 10:42, Adolf Belka wrote: >>>=20 >>> Hi, >>>=20 >>> On 04/06/2025 20:25, Tim Zakharov wrote: >>>> Adolf, >>>> If you have access to a 4GB DDR3 SODIMM (even if you temporarily = grab one from an old laptop or borrow from a colleague), you could try = installing it. I wouldn't be surprised if the system booted up and = either supported the full 4GB or limited it to 2.44GB, but worked = nonetheless. It won't hurt anything to try. Worst case, the system = does not power up until you replace the original SODIMM. >>>=20 >>> Thanks for the suggestions Tim. Unfortunately didn't help. My oldest = laptop turns out to have DDR2 and the SODIMM's are 2GB anyway. >>> My newest laptop has DDR4, so not usable. >>> My netbook does have DDR3 but with only a 2GB SODIMM. >>>=20 >>>> Tim >>>> On 6/4/2025 1:18 PM, Michael Tremer wrote: >>>>> Hello Adolf, >>>>>=20 >>>>> Hmm, this might be difficult. I remember that this processor was a = little bit limited in how much RAM it supports. >>>>>=20 >>>>> However, the Intel Ark says max. 2.44 GiB = (https://www.intel.com/content/www/us/en/products/sku/58916/intel-atom-pro= cessor-n2600-1m-cache-1-6-ghz/specifications.html). >>>>>=20 >>>>> I am not sure how to put this in, but generally that seems to be = not much higher than two. >>>=20 >>> I think you are right. >>>=20 >>> I am only using it as a Testing evaluation system and as a system to = do bug development work on. >>>=20 >>> So I think I will just have to accept that the memory might be used = up a lot and periodically it might go into swap use. I can live with = that. >>>=20 >>> Regards, >>> Adolf. >>>=20 >>>>>=20 >>>>> Best, >>>>> -Michael >>>>>=20 >>>>>> On 3 Jun 2025, at 20:15, Adolf Belka = wrote: >>>>>>=20 >>>>>> Hi Arne and everyone, >>>>>>=20 >>>>>> In the monthly conf call I forgot to ask this question. >>>>>>=20 >>>>>> I have an old IPFire Prime system which has a 2GB sodimm memory = card installed. The memory is very close to fully utilised so that = periodically the swap space gets used for memory. >>>>>>=20 >>>>>> I would like to buy some larger memory for it but I need to know = if I can use 8GB cards with it or if it is limited to 4GB as the largest = memory size that is usable (or worst case, that I have to stay with the = 2GB card if that is the biggest supported). >>>>>>=20 >>>>>> Anyone know what the max ram memory that can be supported by the = Prime systems is? >>>>>>=20 >>>>>> Regards, >>>>>> Adolf. >>>>>>=20 >>>>>=20 >>>=20 >>>=20 >=20 >=20