Opnsense locks up when using Win-11 VM

[joshndroid]

Hello all,
I seem to have a bizarre Opnsense lock up.
I have a windows 11 VM that I was initially using with a bridge network on my Ryzen system.
I since gave it some love with a dedicated GPU/SSD and LAN card all passed through.
I was able to get it all up and running no worries.
What I seem to have though is that while I was trying to download a game, not at full speed (about 25Mb/s) opnsense would lock up and stop the GUI functioning, stop DNS, stop internet to my whole LAN. The only way to fix it would be to hard reset the router.
With the VM off, the router goes for days without issue.
It sounds crazy but I’m at a bit of a loss.
The only thing I could remotely think is either the LAN card that I am using with the VM, Opnsense doesn’t like for some reason or there is some sort of loop back (but I cant see how that second one is a problem, as VM’s are not a niche thing to be doing).

Has anyone experienced this sort of thing?

I assume I’ll probably never get a reply.

But some of the things I am currently undertaking is;
Upgrading the RAM to 8GB – waiting for it in the post
Replacing my intel dual nic card (one of the ports is stuck at 100mbps requiring me to use the realtek nic on the motherboard) – hopefully today.
I did have some mis-matched 6Gb for the last couple years with no issues however in light of the crashing I swapped it for some spare 2x2GB matched sticks with no difference in it crashing, etc.

Further specs are;
Dell Optiplex 9020 SFF
250GB SSD for boot drive
Intel 4570 CPU
1000 Up / 50 Down Fibre

 OPNsense 22.1.8_1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1o 3 May 2022
IDS is ON

I see about 0-2% usage on CPU typically unless it’s getting hammered in download which goes up to 20%ish
I see 31% typical RAM usage with the 4GB atm, will have much more head room with the 2 x 4GB sticks in the coming days when it gets here.

[yourfriendarmando]

Some things to try if you have not already done so:

Run a memory test like with memtest, or extended tests in Dell Diagnostics. That should hopefully certify the metal which opnsense sits on, is sane.

Check your cables if you are only getting 100Mb instead of 1Gb. There are also discussions around using Realtek lan chips and freebsd and or opnsense stack. My conclusion is Intel based phys will lead to healthier lives. Check your chip is not a well known error prone device.

On that notice, check the switch isn't bad either. Bad crcs, stuffers, links, isolate one at a time.

Using speed test is one way to hammer at it, but barely nicks at the the cpu. Connecting many vpn clients to it should see your CPU dance.

Turn off any proxy, IDS, bring only essentials up, then one service at a time. Hopefully the issue creeps up somewhere along the line. Take notes and the scientific method is your friend.

Good luck