OPNsense Forum

English Forums => Hardware and Performance => Topic started by: laurialo on July 11, 2023, 09:45:27 am

Title: OPNSense DEC740 10GbE perfprmace troubles
Post by: laurialo on July 11, 2023, 09:45:27 am

Hello !

I migrated OPNSense from virtualmacine to OPNSense DEC740  all went well but there performance troubles
Under the virtualmacine (VMware 7.X) wich has 1GbE full duplex interface with four vlans which are
OPNsense vitual machine network interfaces (WAN , LAN ,etc) the are connected to GbE switch. We hahe 1Gbps internet connction. Under the vmware vitual mache the speed test gives https://www.speedtest.net/ :
 DOWNLOAD Mbps
881.22
 UPLOAD Mbps
852.06

But under the OPNSense DEC740  the Download is blow half of which is under the virtualmachine achives ,
 DOWNLOAD Mbps
300.22
 UPLOAD Mbps
822.06
OPNSense DEC740 is connected to FS3900 switch with SFP+ FS DAC 10GbE  configured with four tagged vlans
OPNSense DEC740 has four interfaces with (tagged vlans).

Virtualmachine and DEC740 are running the same version  OPNsense 23.1.11-amd64

In theory the both of them perform similarly with they have same 1Gbps internet connection
What could be problem - i would be very pleased if any could help.

Additinal information we using FS 0.5 m 10GB SFP+ Passive Direct Atach Copper Twinax Cable  Model nr SFPP-PC805  is compatible with  OPNsense® Desktop Security Appliance  DEC740



Lauri-Alo Adamson

Title: Re: OPNSense DEC740 10GbE perfprmace troubles
Post by: meyergru on July 12, 2023, 09:08:24 pm

It is hard to tell where this originates from:

1. The DEC7x0 is well capable of 1 GBit/s routing, unless you configure a lot of suricata rules. If you did, try disabling that.
2. Since you migrated a whole setup from a VM, you probably do not have some performance tuning settings that Deciso delivers with a standard configuration. First, I would disable all offloading. Then, you should enable RSS (there are lots of posts on how to do that).
3. Also, there may be misconfigurations in you VLAN setup. From what I have seen, the FS S3900 is not easy to configure with VLANs. You could try to use physical interfaces, like ax0 for lan and igb0 for your internet.
4. Depending on your ISP connection, there may be other factors, like MTU/MSS with PPPoE.