Packet Loss with IPS

[flavio99]

Hi Community

I have packet loss when i enable the IPS mode on the Firewall. Does anyone know this problem and how can i solve it.

My Setup:
Hetzner Dedicater Server with Proxmox VE
OPNsense Firewall with E1000 NIC's

Thanks for Reply,

Flavio

[bartjsmit]

Hi Flavio,

Do you mean packet loss in ping?

Most likely solution is to allocate more resources to the OPNsense virtual machine.

Bart...

[flavio99]

Hi Bart,

Yes, i mean packet loss in ping.


Current resources:
4 vCPU
4 GB of RAM dynamic

How much resources should I allocate?

Best regards,

Flavio

[bulmaro]

I have 4 network interface, I happen with a network interface Packetloss 46%

[bartjsmit]

Hi Flavio,

On paper, that is sufficient for low to moderate use. I've seen reports on this forum about speeds dropping with IPS, but not the degradation that will lose ping packets. What latency are you seeing to 8.8.8.8?

I'm not familiar with Proxmox or Hetzner but it may be fixable with PCI pass-through NIC's rather than using the (para) virtualised interfaces. This also depends on your throughput, to decide if it is worthwhile.

Bart...

[elfrom]

If you look in "system" -> "log file". Do you see errors about interface(s) going down and up shortly after?

[franco]

> a network interface Packetloss 46%

That sounds like checksums are broken either in the guest or host.


Cheers,
Franco