Hello,
I have a dedicated server at Hetzner and have installed Proxmox on it. My goal is to use the main public IP for Proxmox management and allocate an additional public IP for OPNsense. Following hetzner tutorial I've set up a bridged network and requested an extra IP for OPNsense. In the OPNsense VM, I've added two virtual bridges: wmbr0 configured with for WAN DHCP (for additional ip address), and wmbr1 for a private LAN.
So far, everything appeared to be working fine. However, I've encountered an issue: updating OPNsense packages is extremely slow. To troubleshoot, I set up another VM, connected it to wmbr1 (LAN), configured it to use DHCP, and ran a speed test. The download speed seems OK, but the upload is consistently slow or even fails.
If I disable firewall from OPNsense, upload speed returns normal.
Any insights or suggestions to resolve this issue would be greatly appreciated!
OPNsense WM Hardware Info:
OPNsense Interface Settings:
I have a dedicated server at Hetzner and have installed Proxmox on it. My goal is to use the main public IP for Proxmox management and allocate an additional public IP for OPNsense. Following hetzner tutorial I've set up a bridged network and requested an extra IP for OPNsense. In the OPNsense VM, I've added two virtual bridges: wmbr0 configured with for WAN DHCP (for additional ip address), and wmbr1 for a private LAN.
So far, everything appeared to be working fine. However, I've encountered an issue: updating OPNsense packages is extremely slow. To troubleshoot, I set up another VM, connected it to wmbr1 (LAN), configured it to use DHCP, and ran a speed test. The download speed seems OK, but the upload is consistently slow or even fails.
If I disable firewall from OPNsense, upload speed returns normal.
Any insights or suggestions to resolve this issue would be greatly appreciated!
Code:
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
iface lo inet6 loopback
auto enp4s0
iface enp4s0 inet manual
iface eth0 inet manual
# Wan bridge
auto vmbr0
iface vmbr0 inet static
address <main ip>/26
gateway <main gateway>
bridge-ports enp4s0
bridge-stp off
bridge-fd 0
hwaddress <main nic's mac address>
# LAN bridge
auto vmbr1
iface vmbr1 inet static
address 10.40.40.1/24
bridge-ports none
bridge-stp off
bridge-fd 0
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up iptables -t nat -A POSTROUTING -s '10.40.40.0/24' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.40.40.0/24' -o vmbr0 -j MASQUERADE
OPNsense WM Hardware Info:
OPNsense Interface Settings:
Last edited: