slow vm internet speed

[abranca]

Hello to all,
I have a speed problem towards internet on my virtual machines.
Let me briefly describe my infrastructure.

- Server: DELL R710 dual Xeon 5650, 48 Gb of ram, 4 gigabit network cards
- LAN: 2 gigabit switches
- OPNSense Firewall virtualized in Proxmox
- Connection to internet FTTH 1 gigabit

All containers and vm on proxmox and all my physical lan network are connected to the vm firewall.
I made some tests with iperf between proxmox and physical machines and between proxmox and vm firewall and the lan is confirmed to work at 1 gigabit
I enclose images:
for physical machine

1. iperf3-prox-as-client.png
2. iperf3-prox-as-server.png

for vm

1. iperf3-vm101-proxmox.png
   
   

The problem appears when I have to perform speedtests to the internet. My lan network takes full advantage of the 1 gigabit ftth while the vm and container are limited.
Running the test directly from the proxmox server to the internet, the ftth network works at full capacity, while the vm no.
I enclose images:
for physical machine

1. proxmox-speedtest.png

for vm

1. vm-speedtest.png

The vm firewall uses virtio as network card model with queue set to 8 according to the official guide (https://pfstore.com.au/blogs/guides/run-opnsense-in-proxmox) of opnsense.

The network works well, I wanted to understand why the vm data does not report the reality.
Thank you all for your answers and suggestions.

 

[bobmc]

Did you disable Network Hardware Off-loading on the network interfaces in OpnSense?

Is the WAN interface dedicated to the OpnSense VM and is it on a VLAN?

 

[abranca]

Did you disable Network Hardware Off-loading on the network interfaces in OpnSense?

Is the WAN interface dedicated to the OpnSense VM and is it on a VLAN?

Hi bobmc,
thank you for your answer!

Yes I have disabled Network Hardware Off-loading as described in the guide.
The WAN has a dedicated physical port in bridge (Linux Bridge, vmbr1 in the attached screenshot) while for LAN I have assigned another physical port in bridge (Linux Bridge - vmbr2 in the attached screenshot).

The WAN is on a VLAN as per the provider parameters that I summarize here and I put also the link (it's in italian Tiscali parameters).

CONNESSIONE VDSL - EVDSL - FTTH*

USER-VLAN	835
Protocol	(PPPoE) PPP over Ethernet - (RCF 2516)
Encapsulation	802.1Q
Primary DNS	Assigned by server
Secondary DNS	Assigned by server

* Configure the WAN port of the modem with the parameters shown in the table, if the fiber line connection is made through the LAN port of the optical network terminator (ONT) and the WAN port of the modem.

I enclose a screenshot of the node network and OpnSense.

To the OpnSense VM I've assigned 6Gb RAM, 1 physical processor with 8 cores.