Bad performance with VLAN

[Totte]

Hi!

I'm running a APU3D4 Board (4 core, 1Ghz/1.4Ghz CPU, 4 GB ECC DDR3-1333 DRAM, 3 x Gbit ports) with a 1 GB connection.

After being in touch with the reseller support at Teklager, he's been able to throughput 1 GB, or at least close to.

I'm unable to achieve anything above 450~ Mbit/s, and we've manage to pinpoint that the problem seems to be with me running a few (3) VLAN.

Does anyone know of some tweak which would allow a bit more throughput? 1 GB isn't quite necessary (but it would be nice). However, I'd be happy to get at least 600+ and keeping my VLANs if possible.

[ajm]

If the two endpoints on the two VLAN's you've tested the throughput between are both connected via a single vlan trunk, ~450Mbit would be expected ?

Also, with the Intel interfaces on that board, it may be worth trying the setting:

Interfaces:Settings:Disable VLAN hardware filtering

(Note that for this to take effect, it's currently necessary to configure and enable the untagged igb interfaces as an 'Interface', even if you don't plan to use it.)

[cookiemonster]

Hi!

I'm running a APU3D4 Board (4 core, 1Ghz/1.4Ghz CPU, 4 GB ECC DDR3-1333 DRAM, 3 x Gbit ports) with a 1 GB connection.

After being in touch with the reseller support at Teklager, he's been able to throughput 1 GB, or at least close to.

I'm unable to achieve anything above 450~ Mbit/s, and we've manage to pinpoint that the problem seems to be with me running a few (3) VLAN.

Does anyone know of some tweak which would allow a bit more throughput? 1 GB isn't quite necessary (but it would be nice). However, I'd be happy to get at least 600+ and keeping my VLANs if possible.

Would you care to share the OPN version, the particular element required in the setup, any tunables and testing done to achieve this throughput? It would be of great benefit for all who currently struggle with a few hundred Mbps even on 500 Mbps ISP packages.
I assume your are on a fiber connection to the premise and not PPOE. Is that right?
Regarding the VLANs. Are they having your LAN as parent or off another like OPT, and does the throughput tested near full speed with only 1, or need to remove them all and go flat single net?

[Totte]

If the two endpoints on the two VLAN's you've tested the throughput between are both connected via a single vlan trunk, ~450Mbit would be expected ?

Also, with the Intel interfaces on that board, it may be worth trying the setting:

Interfaces:Settings:Disable VLAN hardware filtering

(Note that for this to take effect, it's currently necessary to configure and enable the untagged igb interfaces as an 'Interface', even if you don't plan to use it.)

Versions   OPNsense 22.1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1m 14 Dec 2021

Yes, I'm on fiber.

I've changed the settings following this: https://teklager.se/en/knowledge-base/opnsense-performance-optimization/

And my VLAN is having my LAN as parent, I believe. I'm still kind of new to OpnSense.

[Totte]

As no one seems able to help out, would I make more out of my router just getting rid of the VLAN setup?

Pros/Cons?

[maclinuxfree]

I think you should try to keep the vlans on an extra interface.

[cookiemonster]

Sorry i meant to say thank you for sharing the settings. I've not checked if those are still needed on OPN 22.1.
As for the question, I agree with maclinuxfree, vlans impose an additional load on the already limited system.