PFsense 2.4 on Proxmox 5.2/5.3

[vitor costa]

I run a lot proxmox servers and cluster and almost all have PFsense as Firewall to network. All fine Until upgrade some this Proxmox to 5.2 and upgrade Pfsense on this Proxmox to 2.4 and 2.4.4....
Time to time PFsense network traffic stop on LAN (most times) or Wan... not all network cards die same time... to fix that need reboot PFsense (not stop and start VM). This happend when using Virtio card, E1000 cards. No sure if RTL8139 are seme problem, and never see happen w vmxnet3 (we using it on non cluster becouse seens vmxnet3 cant live migrate).

Any idea or sugestion welcome

 

[azdevsol]

I just upgraded from ProxMox 4 to 5 some months ago and also have a pfSense 2.4 firewall VM with the same issues. Has anyone found a reason for this? I just now switched the two E1000 network cards on vmbr0 and vmbr1 to VirtIO to see if I also still get the same issues.

 

[azdevsol]

In pfSense I also checked: System > Advanced > Networking > Disable hardware checksum offload. It was suggested in many articles but does not seem to be a cure all for this issue.

 

[Ivan Dimitrov]

In general it is not recommended to run pfSense with virtualized NICs. I have been running pfSense since 2.2 virtualized on ProxMox with 4x 1GB NICs passed through and zero problems. These cards are cheep as chips and can save you such problems. Not exactly an answer to your problem but something to consider.

 

[azdevsol]

Thanks, that's an easy fix. Any special settings for the pass through nics if any?

 

[Ivan Dimitrov]

Thanks, that's an easy fix. Any special settings for the pass through nics if any?

Nothing special. Just follow the guide in the proxmox documentation and you should be OK.

 

[Asano]

In general it is not recommended to run pfSense with virtualized NICs.

Is that a recommendation you made up yourself? If yes say so and don't say "in general", otherwise state your source. Until than one should note that pfSense treats VirtIO as first class citizen (and has for a long time): https://docs.netgate.com/pfsense/en/latest/virtualization/index.html