OpnSense 30% of Download speed

[OjunbamO]

Hi Guys,
so i have now OpnSense running on a Proxmox Server. This server has not the best hardware but it should suffice.

The virtual machine for OpnSense has 4 vCPU and 4GB RAM. The load is on average on 15-25%.

Now to my problem: i have a 1GB on download and 50MB Upload. But with the OpnSense I only receive 300MB down and 50MB up. This is for sure the problem on the firewall, because if I attach my laptop directly to the WAN/Modem i get the full download speed.

My 3 explanations for this are:
1. OpnSense costs download speed for the tools it provides/hardware ressources (Routing, DHCP, Application Layer Gateway, VPN, VLANS....)
2. The network card driver between proxmox and opensense is absolutely crap
3. The pci network card for the LAN interface is crap

The only thing to test this out now, is to install proxmox on direct hardware without the proxmox in between.
Before I do that, do you guys have any suggestions or recommendations?


Regards
OjunbamO

[Supermule]

You running any kind of IPS/FW on the system?

[OjunbamO]

hi, yea for sure maybe thats the reason...

[OjunbamO]

Hi Guys,
so i have now OpnSense running on a Proxmox Server. This server has not the best hardware but it should suffice.

The virtual machine for OpnSense has 4 vCPU and 4GB RAM. The load is on average on 15-25%.

Now to my problem: i have a 1GB on download and 50MB Upload. But with the OpnSense I only receive 300MB down and 50MB up. This is for sure the problem on the firewall, because if I attach my laptop directly to the WAN/Modem i get the full download speed.

My 3 explanations for this are:
1. OpnSense costs download speed for the tools it provides/hardware ressources (Routing, DHCP, Application Layer Gateway, VPN, VLANS....)
2. The network card driver between proxmox and opensense is absolutely crap
3. The pci network card for the LAN interface is crap

The only thing to test this out now, is to install proxmox on direct hardware without the proxmox in between.
Before I do that, do you guys have any suggestions or recommendations?


Regards
OjunbamO

Also I did a lot of researching now in the forum. This topic seems a constantly present issue. But I cant find a exact reason why this happens and how to fix it. It is like always just: "performance boost the system", but nobody has a working solution.

https://teklager.se/en/knowledge-base/opnsense-performance-optimization/ this did also not work for me.