pfSense newbie: can it run in a VM and handle a 10Gb/s ISP line?
-
@bob-dig hmm alright thanks.
-
@cr4z33 Although I am only talking about one connection, which probably will be hard to saturate "in the internet" anyways. When it comes to multiple concurrent connections it might be good enough, I don't know. But they (netgate) do have another product for that, which is not free for commercial use and is for professionals, no easy GUI, as far as I know.
-
S stephenw10 moved this topic from Problems Installing or Upgrading pfSense Software on
-
Mmm, WLAN usually mean wireless to me. I assume you don't mean that here?
It's possible to pass 10Gbps through a pfSense VM but you need a pretty powerful hypervisor to do it. I think I've only seen it done on ESXi with vmx NICs too.
Steve
-
@stephenw10 said in pfSense newbie: can it run in a VM and handle a 10Gb/s ISP line?:
WLAN usually mean wireless to me
With everyone else on the planet as well.
https://en.wikipedia.org/wiki/Wireless_LAN
But lets assume that was a typo and they meant wan.. Man that better be one hell of a box.. What are the specs of this hardware your going to run the VM on?
-
Look for refurbished IBM servers and they can easily push 10gbit/s in vm's.
I run them with vm's with 32GB ram and 8 cores.
Easily push wirespeed.... with Iperf
-
What hypervisor do you use for that?
-
@stephenw10 I would be surprised if its the virtual machine manager that comes with DSM, the XPenology is a boot loader for running DSM on non synology hardware. Its not known for its speedy anything, now that might be to the very limited specs of most of the synology boxes - but again maybe on some better hardware?
I would think its going to be have to be a pretty beefy box..
edit: I can push/pull low 900s to a vm running on my ds918+ but I would have move some stuff around to see if can get 2.5ge out of it. I can easy do good 2.37gbps hardware to hardware with usb nic on the ds918+ but have serious doubts I could get anywhere close to 10ge.. even if I could put a hardware nic in the ds918+ which you can't do..
I'm pretty sure heper comment was to the effect that your typical user prob not going to have the hardware to be able to do 10ge via VM.. If we had some specs on this box would be able to make a more educated guess if 10ge is possible.
-
Yes, me too. But I recall being surprised any VM could push 10G when I first saw it. That was some time ago and I can't be sure what the hypervisor being used was. I think it was ESXi though.
-
@stephenw10 ESXi
-
Nice. I assume you need the multiqueue blacklist tweak for vmxnet NICs to reach that?
-
Woah lots of questions here, but my bad I had actually to say what hardware I was using and it's nothing special so I guess myself it won't nearly match the needed specs right...?
-
INTEL Core i3-4130
-
2x8GB DDR4 RAM
-
INTEL X540-T2 NIC card
WLAN: yes I meant Wi-Fi, but all I want is to secure manage the wireless IP cameras and Synology Surveillance Station traffic.
Seeing your posts about beefy hardware needed I wonder if a Netgate 6100 would be actually able to carry all the load needed here?
-
-
@stephenw10 I dont use passthrough nics...
-
@Cool_Corona
Right but if you use vmxnet NICs to the VM you need to disable the blacklist to get pfSense to use multiple queues on them. Which I would expect to be required to pass 10Gbps.@Cr4z33
No I would not expect an i3-4130 to pass that as a hypervisor. Though it may get close I've never tried ESXi on something like that.And no I would not expect to see 10Gbps through a 6100 if it's NATing and filtering the traffic. Especially if that's a single stream TCP test.
Steve
-
@cr4z33 You will not reach 10gbit/s on the hardware.
You need Xeon CPU's.
We run this in our testrigs to compare opnsense to pfsense
https://www.supermicro.com/en/products/system/iot/1u/sys-510d-10c-fn6p
-
@stephenw10 On current ESXi its not needed and on the older ones it hardly made a difference.
-
@cool_corona cheers mate gonna see if I can find a deal on eBay then for some used unit.
-
@cr4z33 https://www.serverworlds.com/refurbished-lenovo-x3550-m5-sff-configured-to-order-8869-ac1/
-
FWIW, even my ancient 2012R2 Hyper-V VM on a 14 year old host shows the logical interface as 10G, but I think you would need a very high power host to come near the packet processing power needed. Free standing host would be better. Then again, I can't even imagine needing 10G unless I had thousands of users anyway. But I'm a dinosaur.
-
@provels You need new nics and xeon's to reach it... and not running it in a Hyper-V environment.
-
@cool_corona said in pfSense newbie: can it run in a VM and handle a 10Gb/s ISP line?:
on the older ones it hardly made a difference.
Hmm, that's very much not been my experience when working with customers virtual installs. Setting that value usually dramatically increased throughput or reduced per core CPU loading. Though that won't be the case in FreeBSD main builds.
Steve
