pppoe passhtrough - packet loss

[keropiko]

Hello all,

i have a pppoe wan connection which makes the call through the providers vdsl modem.
The modem has it's own wan connection with ppoe passhthrough enabled so opnsense can make it's own pppoe connection.

The problem is that the pppoe connection on opnsense has packet loss 3-18% (which i see on the gateway monitor too) instead if i connect a pc to another lan port of the modem (through the modems pppoe connection) there is no packet loss.

I changed modem, i resetted it i changed ports, decreased MTU nothing.
Packet loss on opnsense pppoe connection persists.

The setup of the main wan connection through pppoe has remained the same for many months, this has starded lately with the last versions.

If someone with pppoe passthrough can test pppoe through passthrough, and tell me the results please i would be grateful.

Thank you.

[keropiko]

*UPDATE*

i changed from pppoe to dhcp (ip from isp modem / double NAT) and internet works without packet loss.

The problem is that with this way i have double NAT and no public ip to opnsense.

Could it be a problem with the pppoe of opnsense?

[muchacha_grande]

Just a thought... could it be an MTU related problem?

By the way, double NAT is not a problem. Here in Argentina I've installed a number of OPNSense boxes wid double NAT and work just fine.
The only problems I've found is that to do NAT reflection you have to create extra NAT rules, and if the ISP changes the public IP, which they usually do, could break some VoIP registers if you are using a PBX.
To open ports you just have to make a DMZ in the ISP router pointing to your OPNSense WAN IP.

[keropiko]

Just a thought... could it be an MTU related problem?

By the way, double NAT is not a problem. Here in Argentina I've installed a number of OPNSense boxes wid double NAT and work just fine.
The only problems I've found is that to do NAT reflection you have to create extra NAT rules, and if the ISP changes the public IP, which they usually do, could break some VoIP registers if you are using a PBX.
To open ports you just have to make a DMZ in the ISP router pointing to your OPNSense WAN IP.

hi and thank you for the reply.

i tried to lower the mtu, first 1492, then 1488 then 1480 and so on until 1430 but still had the packet loss.
the double nat creates problem to the outside clients connecting to vpn and voip server behind opnsense (since wan ip is not reachable).

I would like to avoid the isp modem doing the dmz and nating since i cannot set it to bridge mode, only way is pppoe passthrough.

[adiz0r]

Just my 2 cents.

OPNsense's PPPoE performance is notoriously bad when you have a weak CPU. Probably this could explain your woes. What hardware do you run it on?

This is alas a FreeBSD legacy and also affects Pfsense. Even if you have capable NICs in the router, when the CPU is underpowered, PPPoE will suffer. Look up PC Engines APU2 related topics here, Pfsense issue 4821 or FreeBSD bug 203856 for examples.

I'd try a Linux-based distrib on the same hardware, like a current OpenWRT to see if the problem persists.

[keropiko]

Just my 2 cents.

OPNsense's PPPoE performance is notoriously bad when you have a weak CPU. Probably this could explain your woes. What hardware do you run it on?

This is alas a FreeBSD legacy and also affects Pfsense. Even if you have capable NICs in the router, when the CPU is underpowered, PPPoE will suffer. Look up PC Engines APU2 related topics here, Pfsense issue 4821 or FreeBSD bug 203856 for examples.

I'd try a Linux-based distrib on the same hardware, like a current OpenWRT to see if the problem persists.

hi thank you for the reply.

I run my opnsense in a vm in proxmox with an Inter Xeon 1220 v6 as cpu.
in the past both with pfsense or first opnsense installations i never encountered this problem. It is something happening now.

I tried to use a windows pc making a pppoe call with the cable that goes to opnsense and i had no packet loss at all.

I am trying changing mtu mru values but nothing happens, packet loss continues.

[keropiko]

*Update*

One thing regarding my packet loss problem, what i noticed in my configuration (i use multiwan setup),
is that the packet loss on my pppoe interface occurs only when i give priority to the pppoe gateway as default gateway. (All 3 gateways are chosen as upstream ones)

If i give for example priority 253 to pppoe gateway and 254 to the wan2 and 3gwwan gateways, i have the packet loss, if i leave all at the same priority no packet loss to my pppoe wan connection (the faster one) occurs.

The problems is that leaving all at the same priority, the opnsense default gateway is chosen randomly and sometimes the 3g wwan gateway becomes default and uses many data, that i don't want too.

Thank you.