OPNsense Forum
Archive => 17.7 Legacy Series => Topic started by: ekke on September 26, 2017, 11:24:50 pm
-
Im running OPNsense on a xeon 1230v2 8GB with Intel 82574L x 2 onboard on a 1000/100 FTTH.
Before I ran pfSense under ESXi with similar performance problems with a xeon 1220v3 / SM X10SL7-F. I switched to baremetal and downgraded the motherboard since it was overkill for a fw(it was my old freenas board)
I cant reach above ~350Mbit down and ~30Mbit up with either pfSense or OPNsense on baremetal.
At first I ran pfSense under ESXi, but I migrated to baremetal thinking there was some sort of latency issue causing the problems
With the old cheap ASUS 56u (40ish usd) home router I get 800 Mbit down and 100Mbit up
Benchmark setup.
Internet - switch- OPNsense- test computer
\-Asus 56u- test computer
IPS enabled or disabled doesn't matter when I use hyperscan as algorithm for suricata.
CPU utilization peaks at 19%.
Any ides on how I can improve performance?
-
The only thing I can think of right now is that first you should try a different OS on the bare metal HW you are running OPNsense on. See if with another OS & drivers it would get close to your theoretical bandwidth, or to your ASUS SOHO router:
Internet (<-> switch) <-> OPNsense HW with some other OS/ drivers
If yes, build on it trying to identify if it's a FreeBSD drivers' issue, or else...
If no, it means that the effective throughput you have on that bare metal is limited somewhere at the weakest HW component you have there.