Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Baffling pfSense 2.6.0 Issue (10G Performance)

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 3 Posters 4.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Hmm, well often that is some sort of TCP windowing issue. However that is negotiated between the endpoints and that, I assume, has not changed since you were running 2.5.2?

      A 1 Reply Last reply Reply Quote 0
      • A
        anyn12 @stephenw10
        last edited by

        @stephenw10

        The endpoint configurations have not changed since 2.5.2. And, the endpoints get 10Gbps both directions when on same segment. Do you think the fact that iperf between pfsense and endpoints shows 9.7Gbps from pfsense to endpoints but ~2 Gbps from endpoints to pfsense is an indicator of anything?

        I'm not sure if this is helpful, but UDP tests with iperf show 10Gbps in both directions.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          It shows that pfSense is a bad TCP endpoint but that is known. It's configured to be a router not a server. Testing to or from pfSense directly always gives poor results. It's a useful test to prove it's linked at >1Gbps but not much else.
          It also shows the receive side is significantly more processor intensive.

          The UDP test shows zero packet loss at 10G line rate?

          Steve

          A 1 Reply Last reply Reply Quote 0
          • A
            anyn12 @stephenw10
            last edited by

            @stephenw10

            Packet loss per iperf UDP test is about 0.15% both ways.

            Also, enabling flow control looked like a red herring, I'm back at a steady 4.3 Gbps. I also noticed the same thing when enabling powerD - seemed like the problem was fixed but then after a few hours the problem reappeared. Something to do with changing settings and rebooting?

            I guess if you don't have any other thoughts I'll reconfigure to use the x552 for both LANs and see what happens -- I'm getting desperate!

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Yeah, I would try to test using the x500 for both if you can.

              If you simply reboot does it pass at full speed for some time?

              Steve

              A 2 Replies Last reply Reply Quote 0
              • A
                anyn12 @stephenw10
                last edited by anyn12

                @stephenw10

                A reboot doesn't change anything. But, I did notice with the powerD change, and then with the flow control change, throughput was restored for a short time. I've made tons of tunable changes with reboots that have had no impact on throughput.

                I'll reconfigure the x500s and report back. Thanks again for helping me.

                1 Reply Last reply Reply Quote 0
                • A
                  anyn12 @stephenw10
                  last edited by

                  @stephenw10

                  Steve - you were correct, moving both LANs to the x552s solved the problem. I now get 9.8 Gbps both ways on iperf single stream and real-world file transfers are at 10G speeds. I am very grateful for your help!

                  But, any guess as to why the x710 doesn't perform? I now need to use the x710 for WAN connections so I still have an interest in sorting this out.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Hmm, well it's almost certainly some change in the ixl driver.

                    What exact card are you using? How does it appear in pciconf -lv?

                    Are you able to test a 2.7 snapshot? It's possible this has already been solved.

                    Steve

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      anyn12 @stephenw10
                      last edited by

                      @stephenw10

                      In pciconf is appears as "Ethernet Controller X710 for 10GbE SFP+"

                      I'll give 2.7 a try and report back.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Do you have the actual PCI IDs shown? It could be something specific to the chip.

                        A 1 Reply Last reply Reply Quote 0
                        • Cool_CoronaC
                          Cool_Corona
                          last edited by

                          We see the same odd performance on several NIC and its related to cache and writes on the hardware.

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            anyn12 @stephenw10
                            last edited by

                            @stephenw10

                            Hi Steve,
                            Here is the full output:

                            ixl0@pci0:6:0:0: class=0x020000 card=0x02581374 chip=0x15728086 rev=0x02 hdr=0x00
                            vendor = 'Intel Corporation'
                            device = 'Ethernet Controller X710 for 10GbE SFP+'
                            class = network
                            subclass = ethernet

                            ixl1@pci0:6:0:1: class=0x020000 card=0x00001374 chip=0x15728086 rev=0x02 hdr=0x00
                            vendor = 'Intel Corporation'
                            device = 'Ethernet Controller X710 for 10GbE SFP+'
                            class = network
                            subclass = ethernet

                            1 Reply Last reply Reply Quote 1
                            • A
                              anyn12 @Cool_Corona
                              last edited by

                              @cool_corona

                              Thank you -- can you point me to any online discussion/thread where this is discussed so I can follow along?

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.