AFAIR, the IPSec module do not allow “respond only” setup; if tunnel is enabled, NethServer initiate connection to the other endpoint.
So if the IPSec tunnel is not currenty used, could be a great idea disable it.
Why do you offer this? Offer immediately to buy Itanium! I had the same problem with a persistent swap at 2GB of memory and constant server brakes. And this despite the fact that all the modules that could be removed - I removed. For home use I have a Pentium E2220 / 2GB memory. I believe that this is more than enough, for example, for a home server. I’m tired of enduring permanent brakes and gone on pfSense. I now have 1GB and this is enough for everything that I worked on a NethSserver. I’ll be back, only when the NethServer will moderate its gluttony.
And we fly into space and what now? Let’s spend resources reasonably. And do not throw it in the garbage, it’s almost obsolete. And your position looks like - homeless with 2 gigabytes pass by our distribution for real servers.
Phrase from the site: "NethServer is an operating system for Linux enthusiasts, designed for small offices and medium enterprises"
Apparently the concept of a small office is a person of 100+ and should stand at least 2 xeon + 32 GB ram. So?
The minimum requirements are 1GB. Why does 3+ eat while the minimum is running?
I used clearos, which worked for me on P4-2.4 / 2Gb / asus p4p800, and clearos is also based on centos, but he did not eat so much.
Pfsense now performs what I need - firewall + proxy + reverse proxy and does not require large resources.
And the position, such as pfsense it is something there bsd, and we have a steep serious thing here - inappropriate.
It just looks like an attempt to close your eyes to the problem. Microsoft likes to do this.
It’s a pity, it seems to be a NethServer handy distro, but for me, its gluttony negates all the advantages.
I am finding this conversation about a lack of RAM interesting and slightly amusing.
Those people that have been following some of my other posts / comments would be aware that I have been experimenting with converting SoC (System on Chip), ARM based device into fully functional servers. Most of these devices contain only 1GB of memory.
In the past I have installed and maintained various server services (ie. Firewalls / Gateways, Dovecot, LAMP stack, LDAP authentication, file services - SAMBA, Webdav, FTP etc.) on varius devices including 486, Pentium 1 and 2 based computers, most of these devices would have had between 256MB - 1GB of RAM.
In my personal opinion, it is generally not necessary to purchase and install larger amounts of RAM or to increase the speed of the CPU for a home / small office server.
I have a general piece of advice when an individual asks me about purchasing new computers / hardware (I do get quite a few question by domestic, home users asking me about upgrades), that advice being: if choosing new hardware then only spend a reasonable amount of money and choose hardware that is suitable for the individuals needs, ie. if the user only needs a workstation for word-processing and web browser usage then it is not necessary to purchase a Cray-3 supercomputer (I know that this example is a bit extreme, but does illustrate the point about being overzealous in relation to hardware specifications).
Technically Linux and BSD are POSIX systems (POSIX is the standard label for the design of operating systems, especially ones which are compatible with Unix and, yes, they do have a number of similarities, apart from having different lineage (Linux was originally written by Linus Torvalds and BSD or ‘Berkeley Software Distribution’ was originally a set of modifications to Bell Unix created by the University of California. Now there are multiple different versions of BSD, also Apple OS includes some BSD within the iOS / Mac OS kernal).
Whilst NS would not work upon BSD (as of NS current version) due to the fact that NS has been created to correspond to CentOS / Redhat directory - file structure and repository / package management system (RPM) , as well as there would be issues with various library versions numbers.
However, it is possible to install all the server services (ie. Apache, MySQL, Dovecot, Postfix, SSH, SAMBA, OpenLDAP etc.) on either any Linux or BSD variant. Both variants could be configured via a console or third-party web interfaces (ie. Webmin) by an individual with a good understanding of either OS / platform.
@tavrist, some memory statistics from one of my servers which is running as firewall with web content filter, IPS with all rules (expert mode), pbx with mysql and dpi (and a proprietary app in nodejs eating some ram).
total used free shared buff/cache available
Mem: 1919304 1185596 94524 111164 639184 385716
Swap: 1048572 4408 1044164
As you can see I have 2 GB of RAM, some of which is free.
I suspect you may have found a problem in your system, but this kind of problems are hard to debug.
Or you may have misconfigured your system, it’s hard to tell.
I work a more than a handful of NethServers, I don’t observe your problems in any of them.