Text only | Text with Images

OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: thebraz on April 17, 2024, 01:45:51 PM

Title: Extreme reduction of bandwidth on 100Mbit line
Post by: thebraz on April 17, 2024, 01:45:51 PM
Hello,

I installed the Zenarmor plugin in a well working VM installation of Opnsense.

The host is the following Windows 11 PC:

- Intel Core i7 12700
- 128 GB RAM
- Intel(R) Ethernet Connection (17) I219-LM
- Micron 3400 NVMe 1TB
- ST2000DM008-2UB02 (actually the VM is installed on this HDD)

The OPNSense VM has a static IP and is performing basic functions:

- acts as Internet gateway for internal network
- a few nat port-forwarding
- traffic shaping for some internal IPs

Following the details of the VM:

- last version (7.0.14) of Virtualbox Hypervisor
- 16 GB RAM
- 500 GB HDD space
- one core (tried 4 core but had only stability problems) assigned to the VM
- two Intel PRO/1000 MT desktop network cards in bridge mode, every card has its internal IP

When there is no ZenArmor i can obtain all the 100Mbit up/down bandwidth.
When ZenArmor (free) is installed (doesn't seem netmap mode matters, I tried all the option) I barely reach 20 MBit in both directions.
This behaviour even stopping / bypassyng ZenArmor.

Uninstalling ZenArmor revert the system to full bandwidth.

If someone could give advice on how to proceed it's be greatly appreciated.

Thanks in advance
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: Patrick M. Hausen on April 17, 2024, 03:39:00 PM
A Windows 11 system with a desktop/development hypervisor is not a suitable environment for a production firewall.
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: thebraz on April 17, 2024, 04:39:35 PM
Thank you for your post, I was aware of the implication.

For test purpose, I didn't mention production anywhere, should be good.

Is someone able to give some advice in order to the performace problem? Didn't experience it with any other product I tested before.

Best regards
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: sy on April 17, 2024, 06:17:38 PM
Hi,

Are you sure it is the same even if Zenarmor is stopped?
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: thebraz on April 18, 2024, 02:03:35 PM
Hi,

yeah, stopping ZenArmor didn't change the behaviour at all.

Best Regards
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: sy on April 23, 2024, 04:07:49 PM
Hi,

Can you share a report by selecting all checkboxes via Have Feedback option?
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: thebraz on April 24, 2024, 10:32:04 AM
Sure,

I'm away from work for a few days for the holidays but I'll post it ASAP.

Thanks for the help

Best Wishes
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: thebraz on April 24, 2024, 01:23:56 PM
Hello,

I remotely connected and, since I had no access to the described VM, installed ZenArmor on a working OPNSense install in a slightly less powerful host I had access to:

CPU Model: 12th Gen Intel(R) Core(TM) i7-12700
CPU Score: 1203386
Physical Memory Size: 16.6 GB

On this one, for now, I'm able to apply to ZenArmor free the same customizations I did on the other (no ads, High Control in the Category based tab..........) without any bandwidth limitation side effect.

So, for the moment, I thank you vey much for your help and when I come back to work I'll experiment on settings paying attention to the bandwidth side after every modification.

This way, if the problem arises again, I'll be able to describe which step introduced the problem and provide the logs you asked for.

Thanks you very much again for your support.
Title: Re: Extreme reduction of bandwidth on 100Mbit line
Post by: sy on April 25, 2024, 10:43:23 AM
Hi,

Thanks for the update and please don't hesitate to contact us for any further assistance.

Text only | Text with Images