Gigabit internet PPPoE and pfSense
-
The VM is runnning on a L5640 @ 2.27GHz, 1 core only, and 2GB of RAM. All on a SSD.
The NIC is a Intel I350-T4
-
@riahc8 said in Gigabit internet PPPoE and pfSense:
L5640
The Intel Xeon L5640 that came out in 2010?
-
@johnpoz said in Gigabit internet PPPoE and pfSense:
@riahc8 said in Gigabit internet PPPoE and pfSense:
L5640
The Intel Xeon L5640 that came out in 2010?
https://ark.intel.com/content/www/us/en/ark/products/47926/intel-xeon-processor-l5640-12m-cache-2-26-ghz-5-86-gts-intel-qpi.html
Thats the spec sheet I believe
-
This is what is currently sold on the market as pfSense hardware:
https://ark.intel.com/content/www/us/en/ark/products/91533/intel-celeron-processor-j3160-2m-cache-up-to-2-24-ghz.html
This is the most powerful Netgear offers:
https://shop.netgate.com/products/1541-base-pfsense
Comparison
https://ark.intel.com/content/www/us/en/ark/compare.html?productIds=47926,91533,91199
-
@riahc8 but pfsense isn't running as a vm when it runs on the native hardware.. Your comparing apples to oranges..
Again your processor is what like 12 years old..
I use to run pfsense on esxi on an old HP microserver, it ran just fine until I up my internet speed. As a VM on that hardware just couldn't push 500..
I am not saying it can't do it - but pppoe hasn't been known to be rocket ship on pfsense anyway. I don't use pppoe so I don't follow those threads much.
Just pointing out expecting A vm to run full gig on 12 year old processor might be asking a bit much.. @stephenw10 would be the guy that would know..
-
@johnpoz said in Gigabit internet PPPoE and pfSense:
@riahc8 but pfsense isn't running as a vm when it runs on the native hardware.. Your comparing apples to oranges..
Again your processor is what like 12 years old..
I use to run pfsense on esxi on an old HP microserver, it ran just fine until I up my internet speed. As a VM on that hardware just couldn't push 500..
I am not saying it can't do it - but pppoe hasn't been known to be rocket ship on pfsense anyway. I don't use pppoe so I don't follow those threads much.
Just pointing out expecting A vm to run full gig on 12 year old processor might be asking a bit much.. @stephenw10 would be the guy that would know..
AFAIK, its based on clock speed, isnt it?
I been meaning to break out by pfSense into something standalone but cost wise it wasnt worth it
-
BTW, in a virtualized OpenWRT, on the same hardware, it reaches 1Gbps without any issues. I know one is FreeBSD and the other linux but just wanted to state that.
-
@riahc8 said in Gigabit internet PPPoE and pfSense:
1 core only, and 2GB of RAM
I would start by being more generous with your VM resource allocation. You can not get speed improvements by using multi queuing with a single thread VM.
Also this thread should probably be here https://forum.netgate.com/category/33/virtualization where several recent threads describe speed issues with ESXi
-
@patch said in Gigabit internet PPPoE and pfSense:
@riahc8 said in Gigabit internet PPPoE and pfSense:
1 core only, and 2GB of RAM
I would start by being more generous with your VM resource allocation. You can not get speed improvements by using multi queuing with a single thread VM.
Also this thread should probably be here https://forum.netgate.com/category/33/virtualization where several recent threads describe speed issues with ESXi
I just upped it to 4 cores and 4 GB of ram. Same thing.
-
@riahc8 Put your OpenWRT in front of pfSense and have a look if it is really PPPoE what is making problems for you.
-
FWIW, I run pfSense on the computer described in my sig. Here's my speedtest from a couple of days ago. This is on a cable modem with a 500/20 connection. So, pfSense is definitely capable, on the appropriate hardware. I wouldn't run a firewall in a VM for security reasons, let alone performance.
Incidentally, I used to run pfSense on an old HP compact desktop computer. After it died I bought the current hardware. With the HP I would typically get mid 500s down on speedtest. The new hardware caused a huge increase in performance.
-
Again, what speeds are you actually seeing?
If it was running baremetal I'd expect to see the at or very close to 1G PPPoE with that CPU given it's single thread numbers.
Steve
-
@bob-dig said in Gigabit internet PPPoE and pfSense:
@riahc8 Put your OpenWRT in front of pfSense and have a look if it is really PPPoE what is making problems for you.
Ive been giving that some thought and call it a day.......
How would I do this?
-
@stephenw10 said in Gigabit internet PPPoE and pfSense:
Again, what speeds are you actually seeing?
If it was running baremetal I'd expect to see the at or very close to 1G PPPoE with that CPU given it's single thread numbers.
Steve
Give or take: Around 8 Mpbs down , and 0.5 Mpbs up..... Awful speeds as you can tell....
-
Ah, OK! Yeah that's not a single thread PPPoE limitation. That looks more like a link speed/duplex mismatch somewhere. Throughput that low has to be some low level mis-configuration.
I would try testing to/from the firewall directly with iperf to determine which interface is at fault. If it's not both.
Steve
-
@stephenw10 said in Gigabit internet PPPoE and pfSense:
That looks more like a link speed/duplex mismatch somewhere
Was thinking the same thing ;) yeah such horrible speed has to be more than just some cpu bottleneck or pppoe performance hit.
-
@stephenw10 said in Gigabit internet PPPoE and pfSense:
Ah, OK! Yeah that's not a single thread PPPoE limitation. That looks more like a link speed/duplex mismatch somewhere. Throughput that low has to be some low level mis-configuration.
I would try testing to/from the firewall directly with iperf to determine which interface is at fault. If it's not both.
Steve
How would I properly test it? Could you please tell me a example so I can post the results?
Thank you
-
Install the iperf package in pfSense then run an iperf3 server there. Then test against it using an iperf client on the LAN. I would expect to see Gig line rate there, ~940Mbps, unless you have any traffic shaping in place.
Steve
-
@stephenw10 said in Gigabit internet PPPoE and pfSense:
Install the iperf package in pfSense then run an iperf3 server there. Then test against it using an iperf client on the LAN. I would expect to see Gig line rate there, ~940Mbps, unless you have any traffic shaping in place.
Steve
Hmmm I don't have any ethernet physical LAN clients.
Just VMs and a laptop.
-
Well you should be able to get Gigabit between pfSense and another VM in the same host.
But that does mean the issue is far more likely to be on the WAN side.
Steve
