10G acting as 1G

Started by aknotik, December 23, 2020, 07:28:01 AM

Previous topic - Next topic
Hi folks,

I'm running to issue related to throughput. I have Vmware with 10G interfaces and they are configured as vmx devices. Under interfaces configurations status of interfaces show "media: Ethernet autoselect" nothing mentioned about speed. Iperf results show that interfaces acting as they would be 1G, as speed results are no more than 800Mbps. I did tests between other guest hosts and speed is around 8Gbs.
Is there any command to check speed of interfaces in OpnSense? 
Is there an option to force 10G? Or it's possible that something else is reducing speed?
No traffic shaper or limiter configured in OpnSense, but vnstat is reporting an error: "vnstatd[59722]   Traffic rate for "vmx0" higher than set maximum 1000 Mbit (30s->4010803200, r7814958089 t295405005, 64bit:1), syncing".

Thanks in advice!

At first, dont use vnstat when concerned about speed. Sensei and IPS is disabled? Maltrail installed? Which Plugins do you use?

As I understand, vnstat is not getting values automatically by interface speed, they coded in vnstat.conf under "MaxBandwidth" value.
The firewall is simply local firewall, no IPS or other prevention/detection tools are enabled. A few plugins related to monitoring and reporting are enabled.

From IRC (today):


(10:08:12) Eagleman: Any idea why my OPNSense VM on ESXi with VMXNet 3 adapters is limited to 1gb/s? When I do an iperf3 test from one esxi machine to the other through my 10gbe switch I am able to get 9.2gbit/s
(10:08:23) Eagleman: So it is not an underlying problem somewhere
(10:08:52) Eagleman: I've assigned 4 cores of this processor to it: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
(10:33:45) AdSchellevis: vmware heavily relies on "hardware acceleration" and the new iflib drivers are less than perfect either https://forum.opnsense.org/index.php?topic=18754.msg90576#msg90576
(10:34:33) hkais [~xenoadmin@p5dc0e6cc.dip0.t-ipconnect.de] hat den Raum betreten.
(10:43:50) born2bake [born2bake@94.10.47.8] hat den Raum betreten.
(10:45:56) Eagleman7 [~Eagleman@217-122-191-32.cable.dynamic.v4.ziggo.nl] hat den Raum betreten.
(10:46:43) Eagleman hat den Raum verlassen (quit: Ping timeout: 246 seconds).
(10:46:43) Eagleman7 heißt jetzt Eagleman
(10:49:49) Eagleman: Thanks, nice research!
(10:51:41) Eagleman: It went from 850mbit/s to 2.46gbit/s
(11:13:30) AdSchellevis: nice :)