Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [solved] pfSense (2.6.0 & 22.01 ) is very slow on Hyper-V

    Scheduled Pinned Locked Moved Virtualization
    187 Posts 36 Posters 114.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      ttmcmurry @stephenw10
      last edited by ttmcmurry

      @stephenw10 Good day! In the pfSense VM, the interfaces are not associated with VLANs and there are no VLANs defined. From pfSense's perspective, it is working with native hn(x) interfaces.

      78778e0e-8bbb-44e7-9f6b-a3325719462d-image.png

      Hyper-V's vSwitches are all untagged. All VM vNICs in HV are untagged.

      40543a5e-88cc-42b9-885e-cd0ce32c7a8f-image.png

      b2aff1e9-a2cc-47cc-8c9e-398173181f57-image.png

      VLANs exist past the physical uplinks in the Physical Switch.

      1 Reply Last reply Reply Quote 0
      • werterW
        werter
        last edited by

        Decision: do not use hyper-v as virtualization platform ))
        Better try Proxmox VE (open source)

        E 1 Reply Last reply Reply Quote 0
        • Bob.DigB
          Bob.Dig LAYER 8 @Bob.Dig
          last edited by Bob.Dig

          @bob-dig said in After Upgrade inter (V)LAN communication is very slow (on Hyper-V).:

          It wouldn't been the first time I had to install pfSense fresh from the get-go after a new version. Whatever my usecase is, it might be special...
          So I guess "This is the Way".

          Wasn't the way, creating a fresh pfSense-CE-2.6.0 sadly changed nothing. ๐Ÿ˜ž

          If of interest:
          Capture.PNG

          T 1 Reply Last reply Reply Quote 0
          • T
            ttmcmurry @Bob.Dig
            last edited by

            @bob-dig yep. Thx for validating. 2.5.2 is fine, use that till they resolve the issue. ๐Ÿ˜

            Bob.DigB 1 Reply Last reply Reply Quote 0
            • Bob.DigB
              Bob.Dig LAYER 8 @ttmcmurry
              last edited by Bob.Dig

              @ttmcmurry said in After Upgrade inter (V)LAN communication is very slow (on Hyper-V).:

              2.5.2 is fine, use that till they resolve the issue.

              If netgate does, they seem to care only for azure and we all know since the exchange debacle, that the MS Cloud is not the same as MS's server products... So my hopes are rather low on this. Might have to try with DDA once again.

              D 1 Reply Last reply Reply Quote 0
              • D
                DD @Bob.Dig
                last edited by

                @bob-dig Or we switch to OPNsense which is working ok on the same system where pfSense is not working ok. ๐Ÿ™„

                Bob.DigB 1 Reply Last reply Reply Quote 0
                • Bob.DigB
                  Bob.Dig LAYER 8 @DD
                  last edited by

                  @dd I couldn't even install OPNsense on hyper-v not long ago, you had to do a trick, and those guys want to use the normal FreeBSD too.
                  I am stuck, if DDA is not going to work. I have hard time to change my firewall Distro but even more changing my Homserver OS... ๐Ÿ˜ฉ

                  D 1 Reply Last reply Reply Quote 0
                  • D
                    DD @Bob.Dig
                    last edited by

                    @bob-dig They have new version 22.1 which is based on FreeBSD 13 and it's working ok. I have tried it. I think that problem with pfSense 2.6 is because it's based on FreeBSD 12.3. Same problem is with pfSense 2.7.0-DEVELOPMENT which is on FreeBSD 12.3 too. I think, fix will not be available for longer time but they must something to do because now is not pfSense 2.6 (and Plus) useable on Hyper-V.

                    johnpozJ Bob.DigB 3 Replies Last reply Reply Quote 1
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @DD
                      last edited by

                      @dd said in After Upgrade inter (V)LAN communication is very slow (on Hyper-V).:

                      They have new version 22.1 which is based on FreeBSD 13 and it's working ok.

                      Huh? 22.01 is using 12.3 same as 2.6

                      versions.jpg

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      D 1 Reply Last reply Reply Quote 0
                      • D
                        DD @johnpoz
                        last edited by

                        @johnpoz We talked about OPNsense.

                        1 Reply Last reply Reply Quote 1
                        • Bob.DigB
                          Bob.Dig LAYER 8 @DD
                          last edited by Bob.Dig

                          @dd said in After Upgrade inter (V)LAN communication is very slow (on Hyper-V).:

                          because now is not pfSense 2.6 (and Plus) useable on Hyper-V.

                          Thanks for your heads-up regarding OPNsense and FreeBSD Version. But there are many people using the newest pfSense on hyper-v, they resolved their problems it seems, although I don't know what they are exactly doing with it. If you only use it as a firewall and not as a router, that would still work here too or lets say for me at least, your WAN-Speed was and is also affected.

                          So why is it so different, really making no sense to me.

                          @dd said in After Upgrade inter (V)LAN communication is very slow (on Hyper-V).:

                          but they must something to do

                          I don't think so, we are not paying them and hyper-v isn't used much anyway, so... no.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Are you able to test FreeBSD 12.3 in a similar config?

                            Bob.DigB 1 Reply Last reply Reply Quote 0
                            • Bob.DigB
                              Bob.Dig LAYER 8 @stephenw10
                              last edited by

                              @stephenw10 I can't. Is in the current release this already patched? I can't tell for sure, would be helpful to know.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                No, that patch is not in 22.01 or 2.6.

                                https://github.com/pfsense/FreeBSD-src/tree/RELENG_2_6_0/sys/dev/hyperv/pcib

                                It's not yet in 22.05/2.7 either.

                                Steve

                                1 Reply Last reply Reply Quote 1
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • bmeeksB bmeeks referenced this topic on
                                • Bob.DigB
                                  Bob.Dig LAYER 8 @DD
                                  last edited by Bob.Dig

                                  @dd said in After Upgrade inter (V)LAN communication is very slow (on Hyper-V).:

                                  @bob-dig They have new version 22.1 which is based on FreeBSD 13 and it's working ok. I have tried it. I think that problem with pfSense 2.6 is because it's based on FreeBSD 12.3. Same problem is with pfSense 2.7.0-DEVELOPMENT which is on FreeBSD 12.3 too. I think, fix will not be available for longer time but they must something to do because now is not pfSense 2.6 (and Plus) useable on Hyper-V.

                                  I can 100% confirm this, tried it myself. I could also enable all offloading there.

                                  This is from a VM with 4 Cores on another VLAN (and host).
                                  pic.png

                                  What I had to do on both is disabling VMQ in the virtual NICs in hyper-V, otherwise there were some error messages in the console.

                                  So no problem with FreeBSD 13 on Hyper-V (Server 2022) with the other thingy.

                                  1 Reply Last reply Reply Quote 0
                                  • bmeeksB bmeeks referenced this topic on
                                  • bmeeksB bmeeks referenced this topic on
                                  • bmeeksB bmeeks referenced this topic on
                                  • bmeeksB bmeeks referenced this topic on
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Can anyone seeing this test FreeBSD 12.3 directly?

                                    This could be a simple fix if it's something we are setting in pfSense. Though I'm not sure what it could be.

                                    Steve

                                    m0njiM 1 Reply Last reply Reply Quote 0
                                    • m0njiM
                                      m0nji @stephenw10
                                      last edited by m0nji

                                      Just did a simple test

                                      First screenshots shows 2 Windows VMs connected through pfSense 2.6.0(fresh and clean install), all running on Hyper-V.
                                      iperf_pfsense_2_6.png

                                      Second screenshots shows 1 Windows VM connected to a clean FreeBSD 12.3 Install, all running on Hyper-V
                                      iperf_freebsd.png

                                      Intel i3-N305 / 4 x 2.5Gbe LAN @2.7.2-Release
                                      WAN: Vodafone 1000/50, Telekom 250/40; Switch: USW Enterprise 8 PoE, USW Flex XG, US-8-60W; Wifi: Unifi 6 Lite AP, U6 Mesh

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Do you see the same thing using iperf3 -c 192.168.189.10 -R as you do if you run the client on 192.168.189.10?

                                        That opens the states the other way so it would be interesting to see if it fails in the opposite direction.

                                        Steve

                                        m0njiM 1 Reply Last reply Reply Quote 0
                                        • Bob.DigB
                                          Bob.Dig LAYER 8
                                          last edited by

                                          Dammit, if I only knew about the -R thing earlier. ๐Ÿ˜’

                                          1 Reply Last reply Reply Quote 0
                                          • m0njiM
                                            m0nji @stephenw10
                                            last edited by

                                            @stephenw10
                                            Sure that you want to have a iperf test when the test does not even leave the vm? But no problem:

                                            iperf_10.png

                                            Here also the tests again from both VMs with the pfSense in between
                                            iperf_12.png
                                            iperf_11.png

                                            And also a test between both VMs without pfSense (on the same subnet)
                                            iperf_13.png

                                            Intel i3-N305 / 4 x 2.5Gbe LAN @2.7.2-Release
                                            WAN: Vodafone 1000/50, Telekom 250/40; Switch: USW Enterprise 8 PoE, USW Flex XG, US-8-60W; Wifi: Unifi 6 Lite AP, U6 Mesh

                                            m0njiM 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.