Messages

Awesome find. Would explain the behavior I had on my previous hardware, because I don't remember the CPU being that busy. It had to be at least partially responsible, but combined with the NIC limitation, the picture becomes clearer.

@Prevok that wasn't my case
my box with default settings cant reach 500Mbit, probably due the weak cpu

Yeah has to be it. My previous box was running a J3160 (Protectli FW4B) as well. On OpenWRT and Debian I was able to reach 500-600Mbit, slightly less with pfSense and OPNsense with default configs, I wasn barely reaching 200Mbit.

After various tunables, I don't remember even reaching 400Mbit :(

At some point, even with multiple core and multithreading support, the IPC on that CPU is too low (among other things).

Edit: Didn't realised you actually almost maxed the line on that box. Good job :) I gave up and replaced the box :D

I find the information around PPPoE on FreeBSD very confusing.

@Prevok can you confirm this is for when your ISP provides your internet connection as PPPoE?
I'm thinking you might be talking about running a PPP server on OPNsense and this is when MPD5 is used.

Sorry, but just to confirm, could you confirm your ISP is PPPoE and run top -P or top -1 (can't remember which one it is) to see if your first core is used or is the load spread when running at full download bandwidth.

I have moved to an ISP that does not use PPPoE so cannot confirm its fixed sorry.

Thanks

I am not running any PPP server. I need to establish a PPPoE connection, over a specific vLAN, with my ISP.

When running a speedtest, with 'top -P -H' you can see activity jumping to roughly 30% on CPU 1 and 2. The number of threads increases by 2-3 as well (although unsure how accurate this might be).

I am running a Protectli VP2420. Celeron J6412 Quad Core 2GHz. Getting full speed on my Fiber 1GB Down/940GB Up on PPPoE. Performance-wise I left everything default and it's fine.

I have been doing a lot of research too, because of anticipated PPPoE-related issues and it would seem the single core issue has been addressed for a few years. Since OPNsense uses MPD (https://mpd.sourceforge.net/) to establish PPPoE connections, it should utilise all core by default. All the configurables documented everywhere should have little to no effect. To be taken with a grain of salt, I am a fairly new user to OPNsense and FreeBSD in general.

Here is a thread discussing this specifically: https://forum.opnsense.org/index.php?topic=30925.0

I have been running a Protectli VP2420 for about 2 weeks. No issue so far. Based on reports on Reddit, from a discussion with Protectli's support team, it would seem it has the V3 of the interface.

Sorry to revive an older thead. I just didn't see value in starting a new one for the same issue.

Has there been any movement on this? I am a new Zenarmor user and have the same issue.

I have a very simple setup, I only monitor the LAN interface in passive mode and the remote and local are inversed. Drilling down is essentially useless. I have not tried the routed approach, as I have i225-v3 interfaces and read there was incompatibility with Netmap.