Messages

Hello
I recently upgraded my FTTH from 300 to 600 mb. 
In order to do that I have to change from previous ISP to O2. O2 has and all in one device (Mitrastar GPT-2541GNAC) to handle phone and internet connection ( I have no IPTV) .
In OPNsense previous ISP connection was using DHCP, with O2  connection is PPPoE as all in one device  is on bridge mode . VLAN for VoIP and Internet is  still managed by all in one device.
VoIP is working without issues.
Opnsense is virtualized on a i5-2500s with 16gb with Vmware. VM for Opnsense has assigned 2 cores and 4 gb, net driver is vmxnet3.
I have connectivity and it is OK but it seems 600 mb is not possible.
If I try a speedtest from any site available on the internet I can see a message on freebsd screen :
"interrupt storm irq detected on irq266 : throttling interrupt source"
"interrupt storm irq detected on irq257 : throttling interrupt source"

vmstat -i shows those irqs are lan and wan

interrupt                          total       rate
irq1: atkbd0                           6          0
irq15: ata1                        31467          1
irq17: mpt0 ehci0                  85205          2
irq18: uhci0                       82599          2
cpu0:timer                       3082269         65
cpu1:timer                       2862490         61
irq257: vmx0                     2525995         54
irq266: vmx1                     4007046         85
Total                           12677077        269



Shutting down Opnsense and checking with a  Dlink router model DIR-842 (PPPoE connection , same as Opnsense) , speedtest results are way better but the logging capabilities of this device are limited or I don't know how to check if device is really throttling or not

My understanding is that my computer hardware used in Opnsense exceeds D-link hardware specs, maybe I am wrong

Full specs
Intel i5-2500s
Gigabyte 1155 Motherboard (GA-H77-DS3H) , latest BIOS
16GB DDR3 1600 Mhz Crucial Ballistix (2x8gb)
Quad Gigabit Intel i340-T4 dedicated to VM (driver version installed is 5.3.5.42, DKMS built)
Intel Corporation 82572EI Gigabit Ethernet Controller (for Openmediavault omly)
3 TB Toshiba 7200 RPM HDD
320 GB Seagate 7200 RPM HDD
SSD 240 GB Kingston (boot drive)
Openmediavault 4.1.35-1
Kernel 4.19.0-0.bpo.6-amd64 #1 SMP Debian 4.19.67-2+deb10u2~bpo9+1 (2019-11-12) x86_64 GNU/Linux
Vmware player version 14.1.7

Does anyone have suggestions or ideas to avoid throttling?

Best regards,
Jorge Giménez

Hi
Just in case it helps Intel NIC owners, following what funar explained

I have a solution for my Broadcom-NIC'ed Dell R610. It was definitely a driver issue more than a NAT or anything else.  The hw.bce.* settings only apply to Broadcom, but there's probably similar options for the others who have also replied to this thread.

In /boot/loader.conf.local:

hw.bce.verbose=0
hw.bce.tso_enable=0
hw.bce.rx_pages=8
hw.bce.tx_pages=8
hw.pci.enable_msix=1
hw.pci.enable_msi=1
net.inet.tcp.tso=0
net.inet.tcp.sendbuf_max=16777216
net.inet.tcp.recvbuf_max=16777216
net.inet.tcp.sendbuf_inc=16384
net.inet.tcp.recvbuf_inc=524288

I'm now getting full bandwidth in both directions via opnsense. After getting that sorted out, I enabled dual-stack IPv4/IPv6, IDS and upstream traffic shaping. No more issues.

I found that these values for an HP NC360T based on Intel 82571EB (em driver) makes network performance OK , unless for me

Here's my actual /boot/loader.conf.local :
hw.pci.enable_msix=1
hw.pci.enable_msi=1
hw.em.rxd=4096
hw.em.txd=4096
net.inet.tcp.tso=0
net.inet.tcp.sendbuf_max=16777216
net.inet.tcp.recvbuf_max=16777216
net.inet.tcp.sendbuf_inc=16384
net.inet.tcp.recvbuf_inc=524288

Regards,
Jorge

hello, if you want to know the performance of the APU2C4 card or other I3 card,
I realized this:
http://calexium.com/fr/produits/tests-de-performance.html

But I also think that the apu2C4 with msata 16G matches your request

Hi Sebastien

Interesting table of VPN performance, I will read it carefully

Thanks

Jorge

Hi Jorge,
the APU2 is a very good solution for SOHO. IMHO the optimal balance between space/power consumtion/performance/price.
The big point for you ist the vpn performance. Realistic you can reach 100 Mbit speed by vpn connections with an APU2.
If you want/need more vpn performance, you need another hardware with a more powerful cpu.
And a 120GB HDD seems to be an absolute overkill for a FW with 2-5 Concurrent Users! Why don't use an internal 16GB SSD into mPCI?

best regards
Dirk

Hi Dirk.

I thought 120 GB SSD following Hardware sizing & setup chapter of User Manual

Thanks for the advice, I will go for the cheapest 16 gb or 32 gb mpci

Regards,
Jorge

Hello

I am planning to build an Opnsense low power router but I am not able to decide between Apu2c4 (will add a new 120 GB msata)or an i3 7100t (45w) + Asrock H270 ITX that has Intel dual lan(I already have case,psu ,1 HP NC360T Dual port NIC and 60 Gb SSD). My internet connection is  300/300 FFTH. Concurrent users will be from 2 to 5. I am evaluating VPN that's why I cannot decide if APU2c4 could handle encryption in case I upgrade Internet speed to 1 Gbit . Suggestions to low power alternatives will be welcome too

Regards,
Jorge