pfSense gateway warning packet loss

[Ahmet Bas]

Hi,

We installed pfSense installation on one of our Proxmox cluster. Our ProxMox version is
Virtual Environment 5.2-6. After the installation we saw that the gateway of the pfSense monitoring is showing packet loss. From the pfSense installation we are able to ping to the gateway but for some reason we are not able to fix this issue. Below some information which can help

BIOS
Vendor: SeaBIOS
Version: rel-1.11.0-0-g63451fca13-prebuilt.qemu-project.org
Release Date: Tue Apr 1 2014

Version
2.4.3-RELEASE-p1 ( amd64 )
built on Thu May 10 15:02:52 CDT 2018
FreeBSD 11.1-RELEASE-p10

CPU Type
QEMU Virtual CPU version 2.5+
2 CPUs: 1 package(s) x 2 core(s)
AES-NI CPU Crypto: NO
Kernel PTI: Enabled

DNS servers
127.0.0.1
8.8.8.8
1.1.1.1

 

[bobmc]

Did you follow the steps here
https://www.netgate.com/docs/pfsense/virtualization/virtualizing-pfsense-with-proxmox.html

Note particularly, the last step titled "Configuring pfSense to work with Proxmox VirtIO"

 

[Ahmet Bas]

Yes, we did follow the steps as described in the article which you linked. We also restarted the pfSense server after the changes. The gateway is showing packet loss but the connection to that server is without any drops.

 

[guletz]

Yes, we did follow the steps as described in the article which you linked. We also restarted the pfSense server after the changes. The gateway is showing packet loss but the connection to that server is without any drops.

In general, any gateway has a upper limit for icmp/ping. Maybe is your case(if you test packet loss with icmp/ping)

 

[Ahmet Bas]

In general, any gateway has a upper limit for icmp/ping. Maybe is your case(if you test packet loss with icmp/ping)

if we use the shell in pfSense it's also showing packet loss.

 

[mir]

What physical nics do you have in your proxmox host?

 

[Ahmet Bas]

We use this physical nics Intel X520-DA2 in our Proxmox servers.

 

[guletz]

if we use the shell in pfSense it's also showing packet loss.

Hi,

Could you post this (the output of the command that you speak about)?

 

[Ahmet Bas]

Hi,

Could you post this (the output of the command that you speak about)?

Here are some images:

 

[guletz]

I see, the test is done with ping/icmp. If you have loss on icmp, but any others connections(tcp/ip) is OK, then this is not a problem.

 

[Ahmet Bas]

I see, the test is done with ping/icmp. If you have loss on icmp, but any others connections(tcp/ip) is OK, then this is not a problem.

The problem is that we are seeing a issue in the pfSense monitor. We are not sure if this is related to Proxmox but the packet loss issue should be resolved.

 

[guletz]

Like I said, any firewall/gateway/what-ever in this days have limit for icmp/sec. Also if in your LAN/WAn do you have a lot a traffic, then is also possible to have some icmp loss!

 

[yena]

I Have exactly the same issue, have you solved in some way ?
Thanks

 

[Astraea]

How do you have this configured at the physical layer?
Are you using pfSense as a secondary firewall or is it connected directly to the modem?

I have virtualized my pfSense install and have a the physical connections from the modem going to the Proxmox node and then they are assigned to pfSense via the VM configuration using their own bridge (I have dual WAN). then I have another connection that goes from the network switch to the Proxmox node that is also assigned to the VM which is my LAN connection. Once I configured pfSense as per the guide I have no packet loss.