OPNsense Forum

English Forums => Hardware and Performance => Topic started by: Totte on February 14, 2022, 12:03:43 pm

Title: Bad performance with VLAN
Post by: Totte on February 14, 2022, 12:03:43 pm
Hi!

I'm running a APU3D4 Board (4 core, 1Ghz/1.4Ghz CPU, 4 GB ECC DDR3-1333 DRAM, 3 x Gbit ports) with a 1 GB connection.

After being in touch with the reseller support at Teklager, he's been able to throughput 1 GB, or at least close to.

I'm unable to achieve anything above 450~ Mbit/s, and we've manage to pinpoint that the problem seems to be with me running a few (3) VLAN.

Does anyone know of some tweak which would allow a bit more throughput? 1 GB isn't quite necessary (but it would be nice). However, I'd be happy to get at least 600+ and keeping my VLANs if possible.
Title: Re: Bad performance with VLAN
Post by: ajm on February 16, 2022, 12:04:51 pm
If the two endpoints on the two VLAN's you've tested the throughput between are both connected via a single vlan trunk, ~450Mbit would be expected ?

Also, with the Intel interfaces on that board, it may be worth trying the setting:

Interfaces:Settings:Disable VLAN hardware filtering

(Note that for this to take effect, it's currently necessary to configure and enable the untagged igb interfaces as an 'Interface', even if you don't plan to use it.)
Title: Re: Bad performance with VLAN
Post by: cookiemonster on February 16, 2022, 03:50:46 pm
Hi!

I'm running a APU3D4 Board (4 core, 1Ghz/1.4Ghz CPU, 4 GB ECC DDR3-1333 DRAM, 3 x Gbit ports) with a 1 GB connection.

After being in touch with the reseller support at Teklager, he's been able to throughput 1 GB, or at least close to.

I'm unable to achieve anything above 450~ Mbit/s, and we've manage to pinpoint that the problem seems to be with me running a few (3) VLAN.

Does anyone know of some tweak which would allow a bit more throughput? 1 GB isn't quite necessary (but it would be nice). However, I'd be happy to get at least 600+ and keeping my VLANs if possible.
Would you care to share the OPN version, the particular element required in the setup, any tunables and testing done to achieve this throughput? It would be of great benefit for all who currently struggle with a few hundred Mbps even on 500 Mbps ISP packages.
I assume your are on a fiber connection to the premise and not PPOE. Is that right?
Regarding the VLANs. Are they having your LAN as parent or off another like OPT, and does the throughput tested near full speed with only 1, or need to remove them all and go flat single net?
Title: Re: Bad performance with VLAN
Post by: Totte on February 20, 2022, 07:16:18 am
If the two endpoints on the two VLAN's you've tested the throughput between are both connected via a single vlan trunk, ~450Mbit would be expected ?

Also, with the Intel interfaces on that board, it may be worth trying the setting:

Interfaces:Settings:Disable VLAN hardware filtering

(Note that for this to take effect, it's currently necessary to configure and enable the untagged igb interfaces as an 'Interface', even if you don't plan to use it.)


Versions   OPNsense 22.1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1m 14 Dec 2021

Yes, I'm on fiber.

I've changed the settings following this: https://teklager.se/en/knowledge-base/opnsense-performance-optimization/

And my VLAN is having my LAN as parent, I believe. I'm still kind of new to OpnSense.
Title: Re: Bad performance with VLAN
Post by: Totte on March 08, 2022, 07:23:45 pm
As no one seems able to help out, would I make more out of my router just getting rid of the VLAN setup?

Pros/Cons?
Title: Re: Bad performance with VLAN
Post by: maclinuxfree on March 08, 2022, 10:08:26 pm
I think you should try to keep the vlans on an extra interface.
Title: Re: Bad performance with VLAN
Post by: cookiemonster on March 10, 2022, 04:20:55 pm
Sorry i meant to say thank you for sharing the settings. I've not checked if those are still needed on OPN 22.1.
As for the question, I agree with maclinuxfree, vlans impose an additional load on the already limited system.