Opnsense/Zenarmor Performance problem.

[Benoulix]

Hello,

I need to install Opnsense on DL380 Gen8 (2*Xeon 2420/128Gb Memory)

But i have some performance problem with 10Gb Network.

Tested with 10Gb Intel 82599ES  and Broadcom 57810 (For every test)

Test 1 :

Opnsense directly on the serveur: Bad Perf with or without TSO/LRO...  <1Gbps
FreeBsd 13.1 directly: 9.2Gbps

Test2 with Proxmox and virtual Machine:

Opnsense: Bad Perf with or without TSO/LRO...  <1Gbps
FreeBsd 13: 9Gbps

Test3 Vmware (12Vcpu + 32Gb RAM) :

FreeBsd 13: 9Gbps

Opnsense: Bad Perf without TSO/LRO...  <1Gbps

Opnsense: with TSO&LRO... 8Gbps Youhouuu... (Iperf show some retry)

But after install of Zenarmor: 300Mbps.... (I suppose that the problem is the LRO/

Someone have already this case ?

Big thanks for your Help!

[johndchch]

presumably those are 2420 (v0) in the g8 - like most of those old xeons that have terrible single-core perf, and zenarmor is currently single threaded - you'd need something with about double the single core perf to not bottleneck at <1gbps ( if you want to run zenarmor at full 10gbps that's going to be an even bigger problem - until it's multi-threaded I finding a cpu with high enough single core perf is an issue )

[Benoulix]

Thanks for the answer.

We use also Opnsense on a Old Sophos SG330 and the perf are Better. (Without LRO/TSO: 6Gbps without jumbo frame) ands  with 2 Host 9Gbps!

Good to know that this Old Hardware are Bad!

[johndchch]

if it's a sg330v2 it's got an i5-6500 in it - which is easily double the single core perf of the xeon 2420 ( whilst puilling a fraction of the power ) - plus of course it's got faster RAM which will again help ( ddr4 vs ddr3 )