Show Posts
1
22.1 Legacy Series / Checksum issues with VirtIO in QEMU/KVM environment and OPNsense 22.1
« on: January 30, 2022, 06:12:37 pm »
I'm running OPNsense 22.1 in a QEMU/KVM environment - pc-i440fx-3.0 architecture and have some major networking issues since updating yesterday (and once again I forgot to take a snapshot before updating).
(Ryzen 2600, 128 Gb RAM, B450 Chipset, Mellanox ConnectX-2)
All interfaces are VLAN on vtnet0.
Disabling rxcsum, rxcsum6, txcsum and txcsum6 got at least communication between VLAN up again.
Before only ICMP (ping) and UDP passed through my firewall rules.
TCP packages failed due to checksum errors (don't remember which log), connections were visible in the firewall "Live View", but nothing went through.
I think, this is related to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=165059 .
Have there been any changes in handling VirtIO adapters?
I have no additional "Tunables" set other than default (I reset them), "Disable hardware checksum offload", "Disable hardware TCP segmentation offload" and "Disable hardware large receive offload" are checked, "Enable VLAN Hardware Filtering" enabled.
Right now the OpenVPN connection is pretty much unusable and I'm not on location, general performance is abysmal.
Any advice?
(Ryzen 2600, 128 Gb RAM, B450 Chipset, Mellanox ConnectX-2)
All interfaces are VLAN on vtnet0.
Disabling rxcsum, rxcsum6, txcsum and txcsum6 got at least communication between VLAN up again.
Code: [Select]
ifconfig vtnet0 -rxcsum -rxcsum6 -txcsum -txcsum6Until rebooting - is there a permanent solution to this?Before only ICMP (ping) and UDP passed through my firewall rules.
TCP packages failed due to checksum errors (don't remember which log), connections were visible in the firewall "Live View", but nothing went through.
I think, this is related to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=165059 .
Have there been any changes in handling VirtIO adapters?
I have no additional "Tunables" set other than default (I reset them), "Disable hardware checksum offload", "Disable hardware TCP segmentation offload" and "Disable hardware large receive offload" are checked, "Enable VLAN Hardware Filtering" enabled.
Right now the OpenVPN connection is pretty much unusable and I'm not on location, general performance is abysmal.
Any advice?