Performance issues

[ekke]

Im running OPNsense on a xeon 1230v2 8GB with Intel 82574L x 2 onboard on a 1000/100 FTTH.

Before I ran pfSense under ESXi  with similar performance problems with a xeon 1220v3 / SM X10SL7-F. I switched to baremetal and downgraded the motherboard since it was overkill for a fw(it was my old freenas board)

I cant reach above ~350Mbit down and ~30Mbit up with either pfSense or OPNsense on baremetal.
At first I ran pfSense under ESXi, but I migrated to baremetal thinking there was some sort of latency issue causing the problems

With the old cheap ASUS 56u (40ish usd) home router I get 800 Mbit down and 100Mbit up

Benchmark setup.
Internet - switch- OPNsense- test computer
                        \-Asus 56u- test computer

IPS enabled or disabled doesn't matter when I use hyperscan as algorithm for suricata.
CPU utilization peaks at 19%.

Any ides on how I can improve performance?

[Ciprian]

The only thing I can think of right now is that first you should try a different OS on the bare metal HW you are running OPNsense on. See if with another OS & drivers it would get close to your theoretical bandwidth, or to your ASUS SOHO router:

Internet (<-> switch) <-> OPNsense HW with some other OS/ drivers

If yes, build on it trying to identify if it's a FreeBSD drivers' issue, or else...

If no, it means that the effective throughput you have on that bare metal is limited somewhere at the weakest HW component you have there.