Episode Details

OPNsense's tunables page looks like a simple settings screen, but it's actually a direct line to the FreeBSD kernel's deepest controls. This episode breaks down what sysctl MIB entries really are, how OPNsense validates and applies them through its config XML pipeline, and why a single global variable can fix VPN throughput or crash your state table. We cover the mbuf cluster trap, TCP buffer math, the dangers of disabling delayed ACK in mixed environments, and the specific scenarios where tunables are genuinely the right tool.