Hyper-V integration installed with pfSense 2.0.1

asmat

I to have random but frequent crash/reboots with 2.1-BETA1 (amd64).
It would be interesting to try one of the later releases with integrated services installed.
I was foolish enough to try and update this version and after a few hours of trying to get it to run again and failed, I reloaded my install in less than 5 minutes.
It's such a tease to almost have the answer to so many admin's prayers.

Tell me about it. I was this || close using it on a production level. But that wouldn't be very responsible isn't it?

Razor_FX_II

I have the version pfSense-LiveCD-2.1-BETA1-amd64-hyperv-kernel-20130119-0948 installed on a two 2008 R2 Datacenters and as I posted above had reboot issues with it, I was looking at the System Logs at about the time it rebooted to see if there was anything to point me in the right direction and I noticed the familiar "RRD graphs responding to fast" and thinking that the version pfSense-LiveCD-2.0.3-PRERELEASE-amd64-hyperv-kernel-20130119-0048 had no RRD graphs unless reinstalled I thought perhaps there is a connection.

So I disabled RRD graphs in each of the installs and have been running for over 24 hours without a single hiccup.
Before trying this both routers wouldn't make it an hour without rebooting.

I hope this helps.

srnoth

@alexappleton:

I've been running this for a few months on various machines and haven't ran into any issues of yet. Curious to see others reporting issues.

I've exported the VM as a complete package, zipped it up and am sharing it on skydrive. Ready for you to import into Hyper-V 2012. http://sdrv.ms/15jeBZ6. Unzipped this package extracts to 5GB in size.

When you import the VM you will find that Hyper-V console will ask you to match your adapters with your virtual switch configuration. The first adapter is hn0 in pfsense, which is the “WAN” interface. It is also set to pick up IP address via DHCP. The second adapter is hn1 in pfsense, which is the “LAN” interface. It is set to default static IP address of 192.168.1.1. You can change this via the command line menu driven option, or via the webgui. The default username and password is set on this VM, which is admin/pfsense.

Be interested to hear any feedback, fire me an email - alex <at>northernjeep<dot>com. I don't consider myself to be a pfsense expert, but I've set this VM months ago on a few different test beds, and basically forgot about it; it just runs away without concern. So far my experiences with pfsense in Hyper-V have been nothing but positive.</dot></at>

Been using this image for over about a month now with zero stability issues. Current up time is 18 days. Great work!

hege

i have issues when using the squid proxy, but so it works very nice!

Thanks for sharing the image!

hege

Almost 10000 views ;D

@zootie
would it be possible that you make us a new 2.0.3 release image?

I tried it several times with your description, but failed with strange kernel issues.

kanylbullen

This is awesome!

I have been running pfSense at a customer for a couple of years and now that we have vitualized all the servers in Hyper-V I was keen on getting rid of the decade-old IBM-thinkcentre running pfSense.

I can report that I have clustered the pfSense-VM on a Hyper-V 2012 failover cluster with a CSV Volume and when doing a live-migration of pfSense between the nodes I don't lose a single ping at the pfSense console from the internet and only 1 ping is at the clients on the internal network from pfSense and the internet.

I am still struggling with the decision whether to actually use pfSense instead of a commercial alternative with support options, since I got no troubleshooting skills with either pfSense or *nix if anything stops working.

PollyPy

Hi all.

You can try the fresh ISOs with a Hyper-V kernel for both 2.0.3 and 2.1 RC1.
Builded on zootie's instructions. Big tnx.

http://goo.gl/KzpV0 :: pfSense-LiveCD-2.0.3-RELEASE-amd64-HV-20130505-1916.iso
http://goo.gl/Y7D1J :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-HV-20130430-2250.iso

asmat

Got VLANs working with Hyper-V server 2012 and 2 NICs, 1 for WAN and the other one for 5 VLANs ;D

Basically, With server manager from my Windows 8 laptop I created a NIC teaming with only 1 NIC as team member and then proceed with creating vNICs for all my VLANs.
From Hyper-V manager, I then tag each new vNIC with the VLANs number and boom! Everything works.

PF1.JPG_thumb

PF2.JPG_thumb

PF3.JPG_thumb

PF4.JPG_thumb

asmat

@PollyPy:

Hi all.

You can try the fresh ISOs with a Hyper-V kernel for both 2.0.3 and 2.1 RC1.
Builded on zootie's instructions. Big tnx.

http://goo.gl/KzpV0 :: pfSense-LiveCD-2.0.3-RELEASE-amd64-HV-20130505-1916.iso
http://goo.gl/Y7D1J :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-HV-20130430-2250.iso

Running your 2.1 andd RRD graph works out of the box! Yeayyy

Happy times!

hege

@PollyPy:

http://goo.gl/KzpV0 :: pfSense-LiveCD-2.0.3-RELEASE-amd64-HV-20130505-1916.iso
http://goo.gl/Y7D1J :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-HV-20130430-2250.iso

amazing, just testing the 2.0.3 iso and it seems pretty more stable. big big thanks!

Fehler20

Thank you!

svfusion

THANK YOU!

svfusion

what are the patch files for?

PollyPy

@svfusion:

what are the patch files for?

http://blog.chrisara.com.au/2012/08/hyper-v-integration-components-for_13.html
"Hyper-V Integration Components for FreeBSD – Patchfiles" - Chris Knight's FreeBSD patches

stiggle

Using the 2.0.3 HV image - I'm getting occasional crashes, but only noticing them as the GUI has the 'crashed report detected' message.

Intel(R) Xeon(R) CPU X5650 @ 2.67GHz
2 vCPU, 4Gb RAM, IDE disk, 4 vNIC

hege

Hi,

look for the string "sleeping thread" in your error log,
if you can find it, you can try this: (helped me a lot)

System / Advanced / Admin Access
Change Max Processes from 2 to 1

System / Advanced / System Tunables
Change vfs.read_max from default to 64 or 128 (not higher)

Reboot !

Please let me know if it helped you too.

Ps: i hope you are using the image from PollyPy

MrTbone

Hi

I´m running 2.1 on hyper-v 2012 since a week now.
Question, Can i upgrade online or will this break hyper-v integrations?

Also, I´m experience slow upload performance in squid with transparent Proxy.
If i enable transparent Proxy i get 5Mb/s if I disable 50Mb/s Download speed not affected.
Tried som optimization found in forum but no success.

No crash so far.

Fehler20

Question, Can i upgrade online or will this break hyper-v integrations?

I think this will break hyper-v integration.

Also, I´m experience slow upload performance in squid with transparent Proxy.
If i enable transparent Proxy i get 5Mb/s if I disable 50Mb/s Download speed not affected.
Tried som optimization found in forum but no success.

I can NOT confirm this. Maybe high cpu load?

nlitend1

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

Is this a limitation of the virtual network adapters? I am using standard network adapters (not legacy adapters). Am i possibly missing something in not changing anythign with the rules/establishing a hierarchy of traffic (outside of what the traffic shaping wizard does).

I am loving the virtualized pfsense and hope to continue using it, however traffic shaping (QOS) is one of my primary reasons for moving from a consumer based router with DD-WRT and I really hope I can get this working.

Thanks in advance for any help/advice!

hege

Do you talk about mbit or mbyte? :)

If its mbit i cant confirm this, i tested Trafficshapping (HFSC and PRIQ) with 12,5 mbyte real traffic per second.

If you want to configure HFSC with the wizard you can try to delete all floating rules, and then recreate them.

What hardware do you use? specially what NIC do you use?