OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: flavio99 on May 06, 2017, 10:14:32 pm

Title: Packet Loss with IPS
Post by: flavio99 on May 06, 2017, 10:14:32 pm

Hi Community

I have packet loss when i enable the IPS mode on the Firewall. Does anyone know this problem and how can i solve it.

My Setup:
Hetzner Dedicater Server with Proxmox VE
OPNsense Firewall with E1000 NIC's

Thanks for Reply,

Flavio

Title: Re: Packet Loss with IPS
Post by: bartjsmit on May 06, 2017, 10:58:42 pm

Hi Flavio,

Do you mean packet loss in ping?

Most likely solution is to allocate more resources to the OPNsense virtual machine.

Bart...

Title: Re: Packet Loss with IPS
Post by: flavio99 on May 07, 2017, 12:03:32 am

Hi Bart,

Yes, i mean packet loss in ping.


Current resources:
4 vCPU
4 GB of RAM dynamic

How much resources should I allocate?

Best regards,

Flavio

Title: Re: Packet Loss with IPS
Post by: bulmaro on May 07, 2017, 12:44:41 am

I have 4 network interface, I happen with a network interface Packetloss 46%

Title: Re: Packet Loss with IPS
Post by: bartjsmit on May 07, 2017, 11:10:39 am

Hi Flavio,

On paper, that is sufficient for low to moderate use. I've seen reports on this forum about speeds dropping with IPS, but not the degradation that will lose ping packets. What latency are you seeing to 8.8.8.8?

I'm not familiar with Proxmox or Hetzner but it may be fixable with PCI pass-through NIC's rather than using the (para) virtualised interfaces. This also depends on your throughput, to decide if it is worthwhile.

Bart...

Title: Re: Packet Loss with IPS
Post by: elfrom on May 07, 2017, 02:13:31 pm

If you look in "system" -> "log file". Do you see errors about interface(s) going down and up shortly after?

Title: Re: Packet Loss with IPS
Post by: franco on May 08, 2017, 08:57:11 am

> a network interface Packetloss 46%

That sounds like checksums are broken either in the guest or host.


Cheers,
Franco