[SOLVED] VM performance issue 21.10.2 Business edition esxi

[Georges]

Hello,

This is my DECISO Appliance

Versions    OPNsense 21.10.2-amd64
FreeBSD 12.1-RELEASE-p21-HBSD
OpenSSL 1.1.1l 24 Aug 2021
Updates    Click to check for updates.
CPU type    AMD GX-420MC SOC (4 cores)
I got 8Go RAM.

When i'm doing a iperf3 between my computer i get only around 750 Mbits/sec.
When i test it between 2 computer i got around 930 Mbits/sec.

Does anyone get some issue on the 21.10.2-amd64?
And i have stop all services like zenarmor before doing this test.

I got the same kind of issue on my esxi 6.5 with OPNsense, same version where this is 35.8 Mbits...
Where my test from another VM to my PC is around 442 Mbits/sec.

[marcquark]

Are you doing iperf tests to/from OPNsense?

[Georges]

Hello,

Yes like this :

server : iperf3 -s
client : iperf3 -c ServerIPAddress -i 1 -t 20
Windows = Physical PC
Firewall to Windows = 922Mbits/sec  (so it's good)
Windows to Firewall = 765Mbits/sec  (not so bad but still)

Before i test iperf3 from a VM on my esxi and my PC and i get 933Mbits/sec
And the same with my VM OPNsense
FirewallVM to Windows = 208Mbits/sec 
Windows to FirewallVM = Mbits/sec  (cannot make it work)

and last
Firewall to FirewallVM = bits/sec  (cannot make it work)
FirewallVM to Firewall = 284Mbits/sec  (not so bad but still)

So the problem is more on the VM but i they are something with the last update where i lost speed on the Appliance and even more on the VM.

The VM is on NVMe 4vCPUs 12GB RAM

[Georges]

In addition

Speedtest through FirewallVM -> Appliance -> Internet   around 50 Mbps
Speedtest through Appliance 940Mbps

So i can accept a little bit less, no problem... but not this difference 0.0. So i need to found why.

Thank you for your help.

My FirewallVM also run the business version.

[Georges]

i rename the post because i think this is more a problem on the VM.

[marcquark]

iperf tests to and from the firewall are not representative.
What counts is the speed at which the firewall can forward traffic. So you should always be testing like this:

PC 1 (iperf Client) -> Firewall -> PC 2 (iperf Server)

If i understood your previous postings correctly, this performs fine?

[Georges]

Ok thank you.

Yes but i got more problem with the Firewall VM i got.

[Georges]

I switch all the network adapter from vmxnet3 to e1000, i got on speed test only around 50 Mbps... ...
I really don't get it...
I test 1vCPU and 4 vCPU... same...

[Georges]

I try with pfsense around 120Mbps/s
I try IpFire i got 300-400 0.0... compare to 30-50Mbps/s for OpnSense... it's huge.

Same vCPU 4 and 8Go RAM on the Same SSD. :/ Strange...

[Georges]

Hello, i've done new test.
esxi 6.7
firewall on nvme
4 vcpu 8go ram.
E1000 network
passing throught ipfire i got 750 Mbps/s and OPNsense 21.10.2 ... 350 Mbps/s
Any idea how to improve this?

Thank you