slow vm internet speed

abranca

Well-Known Member
Mar 6, 2017
47
5
48
37
Hello to all,
I have a speed problem towards internet on my virtual machines.
Let me briefly describe my infrastructure.

- Server: DELL R710 dual Xeon 5650, 48 Gb of ram, 4 gigabit network cards
- LAN: 2 gigabit switches
- OPNSense Firewall virtualized in Proxmox
- Connection to internet FTTH 1 gigabit

All containers and vm on proxmox and all my physical lan network are connected to the vm firewall.
I made some tests with iperf between proxmox and physical machines and between proxmox and vm firewall and the lan is confirmed to work at 1 gigabit
I enclose images:
for physical machine
  1. iperf3-prox-as-client.png
  2. iperf3-prox-as-server.png
for vm
  1. iperf3-vm101-proxmox.png

The problem appears when I have to perform speedtests to the internet. My lan network takes full advantage of the 1 gigabit ftth while the vm and container are limited.
Running the test directly from the proxmox server to the internet, the ftth network works at full capacity, while the vm no.
I enclose images:
for physical machine
  1. proxmox-speedtest.png
for vm
  1. vm-speedtest.png

The vm firewall uses virtio as network card model with queue set to 8 according to the official guide (https://pfstore.com.au/blogs/guides/run-opnsense-in-proxmox) of opnsense.

The network works well, I wanted to understand why the vm data does not report the reality.
Thank you all for your answers and suggestions.
 

Attachments

  • iperf3-prox-as-client.png
    iperf3-prox-as-client.png
    79.2 KB · Views: 10
  • iperf3-prox-as-server.png
    iperf3-prox-as-server.png
    109.3 KB · Views: 10
  • iperf3-vm101-proxmox.png
    iperf3-vm101-proxmox.png
    26.9 KB · Views: 9
  • proxmox-speedtest.png
    proxmox-speedtest.png
    61.3 KB · Views: 9
  • vm-speedtest.png
    vm-speedtest.png
    129.4 KB · Views: 10
Did you disable Network Hardware Off-loading on the network interfaces in OpnSense?

Is the WAN interface dedicated to the OpnSense VM and is it on a VLAN?
 
Did you disable Network Hardware Off-loading on the network interfaces in OpnSense?

Is the WAN interface dedicated to the OpnSense VM and is it on a VLAN?

Hi bobmc,
thank you for your answer!

Yes I have disabled Network Hardware Off-loading as described in the guide.
The WAN has a dedicated physical port in bridge (Linux Bridge, vmbr1 in the attached screenshot) while for LAN I have assigned another physical port in bridge (Linux Bridge - vmbr2 in the attached screenshot).

The WAN is on a VLAN as per the provider parameters that I summarize here and I put also the link (it's in italian Tiscali parameters).

CONNESSIONE VDSL - EVDSL - FTTH*

USER-VLAN835
Protocol(PPPoE) PPP over Ethernet - (RCF 2516)
Encapsulation802.1Q
Primary DNSAssigned by server
Secondary DNSAssigned by server
* Configure the WAN port of the modem with the parameters shown in the table, if the fiber line connection is made through the LAN port of the optical network terminator (ONT) and the WAN port of the modem.

I enclose a screenshot of the node network and OpnSense.

To the OpnSense VM I've assigned 6Gb RAM, 1 physical processor with 8 cores.
 

Attachments

  • proxmox-network.png
    proxmox-network.png
    57.5 KB · Views: 9
  • opnsense.png
    opnsense.png
    36.9 KB · Views: 9
  • proxmox-wan-bridge.png
    proxmox-wan-bridge.png
    27 KB · Views: 9

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!