Slow internet speed with pfSense virtualized under Proxmox on Zimaboard 832
-
This post is deleted! -
@Urbaman75 said in Slow internet speed with pfSense virtualized under Proxmox on Zimaboard 832:
So my problem seems to be Suricata-related, stopping it the throughput get up to 2G!
Is there a way to get Suricata faster?
Use fewer rules. Most users wind up enabling far more rules than are actually needed. Evaluate the exposed vulnerabilities in your network and only enable rules that cover those scenarios. For example, if you don't run a web server, email server, or public DNS server, then all the rule categories related to those vulnerabilities are not needed and should not be enabled.
I see you appear to have a Bridge interface enabled (
vmbr0). Suricata is not going to play well with that setup. It wants to run on native physical interfaces and not virtual ones (a bridge is a type of virtual interface).You can also try swapping the RUN MODE on the INTERFACE SETTINGS tab to "workers" from "autoFP". Sometimes that can help, but usually more so when using Inline IPS Mode.
-
This post is deleted! -
@Urbaman75: yes, if the virtual NIC is single-queue only that will certainly impact throughput.
-
@Urbaman75 Have you tried turning "Multiqueue" on and off for the VirtIO paravirtualized NIC, to see if it makes any difference?
-
This post is deleted! -
@Urbaman75 You have completely hijacked my thread. Mine was in the context of my newly purchased Zimaboard.
Could you please create a new thread of your own and delete your comments so I could get the space?
-
@brainolution done, deleted my comments, sorry for having taken up your space
-
@Bob-Dig - How do you enable MULTIQUEUE on Proxmox with VirtIO NICs? I have tried this to no avail. Even though I enable the setting in the VirtIO NICS, pfSense does not see it and still reverts to a single (1) queue.
-
@tibere86 Please create a new post for your question. Thanks.
