Netgate sanctioned Proxmox Install Guide

[bearhntr]

Before I made the plunge, I think I read about a dozen postings across the Internet on install pfSense on Proxmox, and watched a couple videos too.

I still feel that I am not getting the 'smoothness' that I should. I did 'virtualize' the Network Adapters with 4 queue on the WAN and the LAN ports. Occasionally, things just seem to hiccup. Like this AM I was on an Microsoft TEAMS Meeting and while nothing else seemed to have an issues the Internet just kinda lagged. Granted, I know I cannot blame it 'solely' on pfSense. I am just curious if I should look to re-do things "Better",

The Proxmox Host has 5 NICs - the on-board and a card with 4-ports. I use the on-board NIC for the Proxmox Management interface and port 0 = WAN and port 1 = LAN on the card (but I did them as follows (vmbr3 was to be a VLAN - not in use, yet):

login-to-view

My hardware has IOMMU enabled and is supported - just wondering if using the ports "directly" would be better.

So what I am asking -- is an Installation Guide "from Netgate" on setting up pfSense in a virtualized environment. Here is how my hardware for the guest is setup:

login-to-view
login-to-view

Much thanks in advance

[stephenw10]

There is this: https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox-ve.html

[bearhntr]

@stephenw10

I had seen that one too - and they have 'virtualized' their ports in there as well. Which I had read elsewhere you must do if you want other VMs on your system to be able to access the LAN (for example). The only difference is that I have 4-queues setup on each of mine.

Maybe I should turn those off. Everything else (with the exception of the DISPLAY are the same - I left it at Default assuming that it would use SPICE - and this VM is 'headless' (meaning you use a web page to make changes in pfSense) - figured this would not matter.

[stephenw10]

The only thing I would add there is to disable hardware checksum offload in pfSense. I have seen reports that can impact vtnet, though I've not seen it myself.

[bearhntr]

@stephenw10

This was in every single video and other 'guide' I viewed...and it is done:

login-to-view

[GastonJ]

@bearhntr i used PCI passthrough on my dual port Intel nic, that way the NIC's used by pfsense are isolated from proxmox. I access my proxmox ve from the computers onboard card.

login-to-view

[bearhntr]

@gastonj

Do you notice any performance +'s or -'s doing it that way?

Do you have other VMs on the same box? How are you getting Network to those from your LAN port?