1
23.7 Legacy Series / Re: Poor throughput of OPNsense installed in a VMware VM using vmxnet3
« on: September 22, 2023, 04:21:33 am »
Did you sort it out?
I'm more or less in the same spot, except I'm testing with public servers.
My connection is pretty stable and it's only 1Gbit/s. It should be easy to get max it out, but OPNsense is the only firewall that is way below the others.
I even did all the tuning and all that but it improved nothing. :/
For each firewall, I cloned the first VM without disks, then installed a fresh image on it so things are exactly the same.
[In the screenshot] OPNsense was tested tuned (allegedly), without extras and a very basic ruleset. The other test is a loaded Mikrotik CHR, under normal load (at least 15-20K connections just from BitTorrent traffic). Results were the firsts ones I got, not the best. pfSense and OpenWRT were deployed just for the test thus they were in similar conditions than OPNsense; they performed consistently similar to CHR though, actually a bit better, I assume since they had no load.
It's not a scientific as your testing but, y'know, it's real world—to complement yours. Hopefully it gets some expert's attention.
I'm more or less in the same spot, except I'm testing with public servers.
My connection is pretty stable and it's only 1Gbit/s. It should be easy to get max it out, but OPNsense is the only firewall that is way below the others.
I even did all the tuning and all that but it improved nothing. :/
For each firewall, I cloned the first VM without disks, then installed a fresh image on it so things are exactly the same.
[In the screenshot] OPNsense was tested tuned (allegedly), without extras and a very basic ruleset. The other test is a loaded Mikrotik CHR, under normal load (at least 15-20K connections just from BitTorrent traffic). Results were the firsts ones I got, not the best. pfSense and OpenWRT were deployed just for the test thus they were in similar conditions than OPNsense; they performed consistently similar to CHR though, actually a bit better, I assume since they had no load.
It's not a scientific as your testing but, y'know, it's real world—to complement yours. Hopefully it gets some expert's attention.