[SOLVED] Low PFSense Proxmox network performance

finux

New Member
Mar 29, 2023
14
1
3
Dear all, I recently changed my physical pfsense by virtualizing it on Proxmox, after that using 3 Gigabit network interfaces when I do a speed test on the links the speed does not exceed 100 Mbps. However, in the PFSense web interface, the cards appear with speeds of 10Gbps if there is something to be done because this way I cannot use the full speed of the links I have.
 

Attachments

  • PFSENSE_REDE.png
    PFSENSE_REDE.png
    34.7 KB · Views: 24
  • PFSENSE_REDE2.png
    PFSENSE_REDE2.png
    44 KB · Views: 23
  • PFSENSE_REDE3.png
    PFSENSE_REDE3.png
    54.9 KB · Views: 21
  • erro_speedtest.png
    erro_speedtest.png
    66.3 KB · Views: 22
You should get full rate in pfSense assuming you have the resources to handle it, which I'm guessing you do.

Some obvious questions:

1. Has your host NIC negotiated at > 100Mbps?
Yes, according to the attached print, pfsense is communicating at 1000Mbps

2. Did you follow the Netgate guide and disable hardware checksums? [https://docs.netgate.com/pfsense/en...ble-hardware-checksums-with-proxmox-ve-virtio]
Adjusted according to Proxmox documentation.

3. What resources have you allocated to pfSense? What's CPU use during saturation?
Below is a printout of the PFSense configuration summary.

Below are the prints relating to your questions:
 

Attachments

  • QUEST-1.png
    QUEST-1.png
    39.6 KB · Views: 31
  • QUEST-2.png
    QUEST-2.png
    116.1 KB · Views: 29
  • QUEST-3.png
    QUEST-3.png
    32 KB · Views: 27
Ok, all looks sensible there.

Without knowing what host CPU, I'd say that's pretty high CPU use (3 CPUs though - what! where is your OCD?) if you're only pushing through 100Mbps; I think I'm struggling to top 20% over 2 vCPU (from an i7-7700) with a 500Mbps downlink.

What about LAN-side NIC? Can you transfer a file to/from pfSense from inside the network and see how that performs?
 
Hello Wallace, issue resolved after conducting some internal tests. I detected packet loss on the internal network interface (LAN) and replaced the interface, which has resolved the problem. Thanks to everyone for the feedback.
 
  • Like
Reactions: wallacio

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!