Messages

with the setting from my previous post I was able to get 1Gbps PPPoE with j3160, J4125 (as reported here) handle 1Gbps PPPoE w/o tuning, most probably N100 will handle 2.5GBps PPPoE without issue

https://www.cpu-monkey.com/it/compare_cpu-intel_celeron_j3160-vs-intel_processor_n100

Installed packages to be REMOVED:
   mpd5: 5.9_16
   openssl: 1.1.1w,1
   opnsense: 23.7.6


this looks very bad

maybe i was luckly, after switching from the isp router to opnsense I noticed the poor performance and after few read I found a big difference with:

net.isr.dispatch=deferred
net.isr.maxthreads=-1
net.isr.bindthreads=1

the rest make some kind of difference but not big as this one

btw FW4B is a rebranded YL-J3160L4 (I'm running protectcli coreboot bios on it)

@Prevok that wasn't my case
my box with default settings cant reach 500Mbit, probably due the weak cpu

For reference I have a MiniPC YL-J3160L4 which is an Intel(R) Celeron(R) CPU J3160 @ 1.60GHz (4 cores, 4 threads) with 4GB of ram and 4x1GBit ethernet (Intel(R) I210 Flashless (Copper))

Recently I change my connection from vdsl2 200/30 to ftth 1000/300
Initially I have just swapped the "isp router" and everything was working fine with speedtest results up to 906/310
As the new isp modem is an huge white box which is very ugly and as all Italian (maybe europe?) FTTH ISP use PPPoE and OPNSense support it, I decided to remove the "isp router" and use directly the OPNSense box and here started my trouble with performance which dropped down to 430/310

after some reading here, pfsense and general freebsd forums I found a configuration that raised performance up to 902/310

Enabled powerd
Disabled Hardware CRC/TSO/LRO and VLAN Filtering
Adjusted this Tunables:

Code Select Expand


net.isr.dispatch=deferred
net.isr.maxthreads=-1
net.isr.bindthreads=1
net.inet.ip.intr_queue_maxlen=3000
net.inet.rss.enabled=1
dev.igb.0.iflib.override_qs_enable=1


only the last one is hw specific for my Intel I210 and igb0 is the interface connected to the Optical Network Terminal (Optical to Ethernet signal converter)

about VoIP in OPNSense I have assigned a static Lan IP to the Wan interface of the "isp modem" and added a Port Forward of WAN address port 5060/UDP to the previous static IP and I was able to move the isp modem away from my eyes :D

check under Interfaces

I did a test on kvm with virtio net driver, and a quick test shows a big performance improvement 2/3 times faster than 20.1 (I guess is the driver update from 11.2 to 12.1) 

i have similar issue with haproxy

https://github.com/opnsense/core/issues/2389

anyway for user side is not really clear
i have also noticed saving and apply a firewall rule (even without a change) do the synchronization

i guess this should apply for all or most of the service, could be clearer and easier to handle an apply button which sync conf and restart the service in both appliance?