LXC strange upload network speed

O

openaspace

Active Member
Sep 16, 2019
486
13
38
Italy
Hello.
I have moved a VPS configuration to LXC with debian and from the 90MB/s of the VPS , now I can reach only 40MB/s with the container.
Also occour that a download start at 40MB/s and go down around 25/30 MB/s.... The available host bandwidth is 1Gbps.

If I start other downloads at the same time, the download bandwidth don't encrease, but remain around 30/MB/s and the speed of each transfer is divided within the 30MB

The lxc ram is free for 70%, the host cpu 50%, host RAM 35% free.
The LXC is behind OPNSENSE firewall... therefore i have tried to give more ram and cpu to the firewall..
but no results...

on the VPS i was using multiqueque to 8, but with LXC there no parameters to set....

What can be the problem...?

Thank you.
 
Last edited:
Hi,

I guess you use the wrong type of vnic on the Opensense.
The 30 MB/s sounds like an e1000. Use a virtio for the Opensense and disable the hardware checksum offload.
 
wolfgang said:
Hi,

I guess you use the wrong type of vnic on the Opensense.
The 30 MB/s sounds like an e1000. Use a virtio for the Opensense and disable the hardware checksum offload.
Click to expand...
Yes, but with Virtio I can reach only 20Mb/s..
I was tried to use e100 for this problem, poor speed with virtio instead of e100..

What can be the problem?
offload etc.. are disabled from months :)
 
What do you use as phy Nic for this vnic?
 
I'm not using opensense, but there are two things about performance with IDS.

1.) how many threads do you use? I would look at the processes, and maybe you have only one Suricata process with about 100% utilization.
2.) the latency will increase if you use IDS to reduce the max bandwidth.

If you use IDS, I would consider using for the WAN a passthrough NIC or VF if you nic support this.
 
wolfgang said:
I'm not using opensense, but there are two things about performance with IDS.

1.) how many threads do you use? I would look at the processes, and maybe you have only one Suricata process with about 100% utilization.
2.) the latency will increase if you use IDS to reduce the max bandwidth.

If you use IDS, I would consider using for the WAN a passthrough NIC or VF if you nic support this.
Click to expand...
Hello, thanks for your support.
I use 8 thread and IPS it's not set to reduce bandwidth.
 
You must log in or register to reply here.
Top Bottom