Hi,
so like many others I decided to 'upgrade' my old HP T630 thin client which has reliably run PFSENSE for a few years to benefit from the joys of virtualisation and also to give me more options to deploy a few other things locally. I've successfully deployed an instance of both my existing PFSense router and also OPNSense onto this Lenovo 920q (specs in title). All working after some tweaks (has to set the MTU for OPNSense virtIO card on the vm config to the correct size to get it working). However I've noted that on both PFSense and OPNSense my throughput (download) is way below where it should be. I've tried all the tweaks (disabling offload etc). My VM is set to use the correct 'host' setting so it sees the CPU directly. I'm also using the VIRTIO driver which is apparently the most efficient. Network card is a INTEL i350-4. I'm getting 85/90mbits/sec download when it should be 350-500mbits/sec. On my lowly old T630 this was no issue. Are there specific tweaks I need to make on OPNSense/Proxmox to improve this performance? I was told passthru was no longer needed (which is why i am using VIRTIO).
thanks
Adam.
Silly question maybe, but what speed is being negotiated on the link?
See this (https://forum.opnsense.org/index.php?topic=44159.0) for a start. Use RSS under OpnSense (it's documented (https://docs.opnsense.org/troubleshooting/performance.html)) and set the VM NICs to multiqueue.
Quote from: meyergru on Today at 02:13:11 PMSee this (https://forum.opnsense.org/index.php?topic=44159.0) for a start. Use RSS under OpnSense (it's documented (https://docs.opnsense.org/troubleshooting/performance.html)) and set the VM NICs to multiqueue.
thanks. I'd already configured multi-queue on the nics to match the allocated number of cores. Not sure if RSS will help here though. The machine is doing almost nothing CPU wise..
Will have a read anyway. thank you.
You did use multiple threads if you tried this via iperf?
Also look at:
https://forum.opnsense.org/index.php?topic=52420.0
And be sure to use "host" CPU type and disable Spectre and Meltdown mitigations (https://docs.opnsense.org/troubleshooting/hardening.html#spectre-and-meltdown).