Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Baffling pfSense 2.6.0 Issue (10G Performance)

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 3 Posters 4.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      anyn12 @stephenw10
      last edited by

      @stephenw10

      The endpoint configurations have not changed since 2.5.2. And, the endpoints get 10Gbps both directions when on same segment. Do you think the fact that iperf between pfsense and endpoints shows 9.7Gbps from pfsense to endpoints but ~2 Gbps from endpoints to pfsense is an indicator of anything?

      I'm not sure if this is helpful, but UDP tests with iperf show 10Gbps in both directions.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        It shows that pfSense is a bad TCP endpoint but that is known. It's configured to be a router not a server. Testing to or from pfSense directly always gives poor results. It's a useful test to prove it's linked at >1Gbps but not much else.
        It also shows the receive side is significantly more processor intensive.

        The UDP test shows zero packet loss at 10G line rate?

        Steve

        A 1 Reply Last reply Reply Quote 0
        • A
          anyn12 @stephenw10
          last edited by

          @stephenw10

          Packet loss per iperf UDP test is about 0.15% both ways.

          Also, enabling flow control looked like a red herring, I'm back at a steady 4.3 Gbps. I also noticed the same thing when enabling powerD - seemed like the problem was fixed but then after a few hours the problem reappeared. Something to do with changing settings and rebooting?

          I guess if you don't have any other thoughts I'll reconfigure to use the x552 for both LANs and see what happens -- I'm getting desperate!

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Yeah, I would try to test using the x500 for both if you can.

            If you simply reboot does it pass at full speed for some time?

            Steve

            A 2 Replies Last reply Reply Quote 0
            • A
              anyn12 @stephenw10
              last edited by anyn12

              @stephenw10

              A reboot doesn't change anything. But, I did notice with the powerD change, and then with the flow control change, throughput was restored for a short time. I've made tons of tunable changes with reboots that have had no impact on throughput.

              I'll reconfigure the x500s and report back. Thanks again for helping me.

              1 Reply Last reply Reply Quote 0
              • A
                anyn12 @stephenw10
                last edited by

                @stephenw10

                Steve - you were correct, moving both LANs to the x552s solved the problem. I now get 9.8 Gbps both ways on iperf single stream and real-world file transfers are at 10G speeds. I am very grateful for your help!

                But, any guess as to why the x710 doesn't perform? I now need to use the x710 for WAN connections so I still have an interest in sorting this out.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Hmm, well it's almost certainly some change in the ixl driver.

                  What exact card are you using? How does it appear in pciconf -lv?

                  Are you able to test a 2.7 snapshot? It's possible this has already been solved.

                  Steve

                  A 1 Reply Last reply Reply Quote 0
                  • A
                    anyn12 @stephenw10
                    last edited by

                    @stephenw10

                    In pciconf is appears as "Ethernet Controller X710 for 10GbE SFP+"

                    I'll give 2.7 a try and report back.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Do you have the actual PCI IDs shown? It could be something specific to the chip.

                      A 1 Reply Last reply Reply Quote 0
                      • Cool_CoronaC
                        Cool_Corona
                        last edited by

                        We see the same odd performance on several NIC and its related to cache and writes on the hardware.

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          anyn12 @stephenw10
                          last edited by

                          @stephenw10

                          Hi Steve,
                          Here is the full output:

                          ixl0@pci0:6:0:0: class=0x020000 card=0x02581374 chip=0x15728086 rev=0x02 hdr=0x00
                          vendor = 'Intel Corporation'
                          device = 'Ethernet Controller X710 for 10GbE SFP+'
                          class = network
                          subclass = ethernet

                          ixl1@pci0:6:0:1: class=0x020000 card=0x00001374 chip=0x15728086 rev=0x02 hdr=0x00
                          vendor = 'Intel Corporation'
                          device = 'Ethernet Controller X710 for 10GbE SFP+'
                          class = network
                          subclass = ethernet

                          1 Reply Last reply Reply Quote 1
                          • A
                            anyn12 @Cool_Corona
                            last edited by

                            @cool_corona

                            Thank you -- can you point me to any online discussion/thread where this is discussed so I can follow along?

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.