Messages

1

20.1 Legacy Series / Virtualized Opnsense 20.1.3 and interrupt storm message

« on: March 20, 2020, 08:15:25 am »

Hello
I recently upgraded my FTTH from 300 to 600 mb. 
In order to do that I have to change from previous ISP to O2. O2 has and all in one device (Mitrastar GPT-2541GNAC) to handle phone and internet connection ( I have no IPTV) .
In OPNsense previous ISP connection was using DHCP, with O2  connection is PPPoE as all in one device  is on bridge mode . VLAN for VoIP and Internet is  still managed by all in one device.
VoIP is working without issues.
Opnsense is virtualized on a i5-2500s with 16gb with Vmware. VM for Opnsense has assigned 2 cores and 4 gb, net driver is vmxnet3.
I have connectivity and it is OK but it seems 600 mb is not possible.
If I try a speedtest from any site available on the internet I can see a message on freebsd screen :
"interrupt storm irq detected on irq266 : throttling interrupt source"
"interrupt storm irq detected on irq257 : throttling interrupt source"

vmstat -i shows those irqs are lan and wan

interrupt                          total       rate
irq1: atkbd0                           6          0
irq15: ata1                        31467          1
irq17: mpt0 ehci0                  85205          2
irq18: uhci0                       82599          2
cpu0:timer                       3082269         65
cpu1:timer                       2862490         61
irq257: vmx0                     2525995         54
irq266: vmx1                     4007046         85
Total                           12677077        269



Shutting down Opnsense and checking with a  Dlink router model DIR-842 (PPPoE connection , same as Opnsense) , speedtest results are way better but the logging capabilities of this device are limited or I don't know how to check if device is really throttling or not

My understanding is that my computer hardware used in Opnsense exceeds D-link hardware specs, maybe I am wrong

Full specs
Intel i5-2500s
Gigabyte 1155 Motherboard (GA-H77-DS3H) , latest BIOS
16GB DDR3 1600 Mhz Crucial Ballistix (2x8gb)
Quad Gigabit Intel i340-T4 dedicated to VM (driver version installed is 5.3.5.42, DKMS built)
Intel Corporation 82572EI Gigabit Ethernet Controller (for Openmediavault omly)
3 TB Toshiba 7200 RPM HDD
320 GB Seagate 7200 RPM HDD
SSD 240 GB Kingston (boot drive)
Openmediavault 4.1.35-1
Kernel 4.19.0-0.bpo.6-amd64 #1 SMP Debian 4.19.67-2+deb10u2~bpo9+1 (2019-11-12) x86_64 GNU/Linux
Vmware player version 14.1.7

Does anyone have suggestions or ideas to avoid throttling?

Best regards,
Jorge Giménez

2

18.1 Legacy Series / Re: 18.1 Network Performance (17.7.11-12 was fine)?

« on: February 02, 2018, 06:20:46 pm »

Hi
Just in case it helps Intel NIC owners, following what funar explained

I have a solution for my Broadcom-NIC'ed Dell R610. It was definitely a driver issue more than a NAT or anything else.  The hw.bce.* settings only apply to Broadcom, but there's probably similar options for the others who have also replied to this thread.

In /boot/loader.conf.local:

hw.bce.verbose=0
hw.bce.tso_enable=0
hw.bce.rx_pages=8
hw.bce.tx_pages=8
hw.pci.enable_msix=1
hw.pci.enable_msi=1
net.inet.tcp.tso=0
net.inet.tcp.sendbuf_max=16777216
net.inet.tcp.recvbuf_max=16777216
net.inet.tcp.sendbuf_inc=16384
net.inet.tcp.recvbuf_inc=524288

I'm now getting full bandwidth in both directions via opnsense. After getting that sorted out, I enabled dual-stack IPv4/IPv6, IDS and upstream traffic shaping. No more issues.

I found that these values for an HP NC360T based on Intel 82571EB (em driver) makes network performance OK , unless for me

Here's my actual /boot/loader.conf.local :
hw.pci.enable_msix=1
hw.pci.enable_msi=1
hw.em.rxd=4096
hw.em.txd=4096
net.inet.tcp.tso=0
net.inet.tcp.sendbuf_max=16777216
net.inet.tcp.recvbuf_max=16777216
net.inet.tcp.sendbuf_inc=16384
net.inet.tcp.recvbuf_inc=524288

Regards,
Jorge

3

Hardware and Performance / Re: APU2C4 vs I3 7100t

« on: January 23, 2018, 04:27:26 pm »

hello, if you want to know the performance of the APU2C4 card or other I3 card,
I realized this:
http://calexium.com/fr/produits/tests-de-performance.html

But I also think that the apu2C4 with msata 16G matches your request

Hi Sebastien

Interesting table of VPN performance, I will read it carefully

Thanks

Jorge

4

Hardware and Performance / Re: APU2C4 vs I3 7100t

« on: January 23, 2018, 04:25:32 pm »

Hi Jorge,
the APU2 is a very good solution for SOHO. IMHO the optimal balance between space/power consumtion/performance/price.
The big point for you ist the vpn performance. Realistic you can reach 100 Mbit speed by vpn connections with an APU2.
If you want/need more vpn performance, you need another hardware with a more powerful cpu.
And a 120GB HDD seems to be an absolute overkill for a FW with 2-5 Concurrent Users! Why don't use an internal 16GB SSD into mPCI?

best regards
Dirk

Hi Dirk.

I thought 120 GB SSD following Hardware sizing & setup chapter of User Manual

Thanks for the advice, I will go for the cheapest 16 gb or 32 gb mpci

Regards,
Jorge

5

Hardware and Performance / APU2C4 vs I3 7100t

« on: January 22, 2018, 02:58:10 pm »

Hello

I am planning to build an Opnsense low power router but I am not able to decide between Apu2c4 (will add a new 120 GB msata)or an i3 7100t (45w) + Asrock H270 ITX that has Intel dual lan(I already have case,psu ,1 HP NC360T Dual port NIC and 60 Gb SSD). My internet connection is  300/300 FFTH. Concurrent users will be from 2 to 5. I am evaluating VPN that's why I cannot decide if APU2c4 could handle encryption in case I upgrade Internet speed to 1 Gbit . Suggestions to low power alternatives will be welcome too

Regards,
Jorge