OPNsense Forum
English Forums => Hardware and Performance => Topic started by: Benoulix on June 12, 2023, 03:31:22 pm
-
Hello,
I need to install Opnsense on DL380 Gen8 (2*Xeon 2420/128Gb Memory)
But i have some performance problem with 10Gb Network.
Tested with 10Gb Intel 82599ES and Broadcom 57810 (For every test)
Test 1 :
Opnsense directly on the serveur: Bad Perf with or without TSO/LRO... <1Gbps
FreeBsd 13.1 directly: 9.2Gbps
Test2 with Proxmox and virtual Machine:
Opnsense: Bad Perf with or without TSO/LRO... <1Gbps
FreeBsd 13: 9Gbps
Test3 Vmware (12Vcpu + 32Gb RAM) :
FreeBsd 13: 9Gbps
Opnsense: Bad Perf without TSO/LRO... <1Gbps
Opnsense: with TSO&LRO... 8Gbps Youhouuu... (Iperf show some retry)
But after install of Zenarmor: 300Mbps.... (I suppose that the problem is the LRO/
Someone have already this case ?
Big thanks for your Help!
-
presumably those are 2420 (v0) in the g8 - like most of those old xeons that have terrible single-core perf, and zenarmor is currently single threaded - you'd need something with about double the single core perf to not bottleneck at <1gbps ( if you want to run zenarmor at full 10gbps that's going to be an even bigger problem - until it's multi-threaded I finding a cpu with high enough single core perf is an issue )
-
Thanks for the answer.
We use also Opnsense on a Old Sophos SG330 and the perf are Better. (Without LRO/TSO: 6Gbps without jumbo frame) ands with 2 Host 9Gbps!
Good to know that this Old Hardware are Bad!
-
if it's a sg330v2 it's got an i5-6500 in it - which is easily double the single core perf of the xeon 2420 ( whilst puilling a fraction of the power ) - plus of course it's got faster RAM which will again help ( ddr4 vs ddr3 )