Hyper-V integration installed with pfSense 2.0.1

kanylbullen

This is awesome!

I have been running pfSense at a customer for a couple of years and now that we have vitualized all the servers in Hyper-V I was keen on getting rid of the decade-old IBM-thinkcentre running pfSense.

I can report that I have clustered the pfSense-VM on a Hyper-V 2012 failover cluster with a CSV Volume and when doing a live-migration of pfSense between the nodes I don't lose a single ping at the pfSense console from the internet and only 1 ping is at the clients on the internal network from pfSense and the internet.

I am still struggling with the decision whether to actually use pfSense instead of a commercial alternative with support options, since I got no troubleshooting skills with either pfSense or *nix if anything stops working.

PollyPy

Hi all.

You can try the fresh ISOs with a Hyper-V kernel for both 2.0.3 and 2.1 RC1.
Builded on zootie's instructions. Big tnx.

http://goo.gl/KzpV0 :: pfSense-LiveCD-2.0.3-RELEASE-amd64-HV-20130505-1916.iso
http://goo.gl/Y7D1J :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-HV-20130430-2250.iso

asmat

Got VLANs working with Hyper-V server 2012 and 2 NICs, 1 for WAN and the other one for 5 VLANs ;D

Basically, With server manager from my Windows 8 laptop I created a NIC teaming with only 1 NIC as team member and then proceed with creating vNICs for all my VLANs.
From Hyper-V manager, I then tag each new vNIC with the VLANs number and boom! Everything works.

PF1.JPG_thumb

PF2.JPG_thumb

PF3.JPG_thumb

PF4.JPG_thumb

asmat

@PollyPy:

Hi all.

You can try the fresh ISOs with a Hyper-V kernel for both 2.0.3 and 2.1 RC1.
Builded on zootie's instructions. Big tnx.

http://goo.gl/KzpV0 :: pfSense-LiveCD-2.0.3-RELEASE-amd64-HV-20130505-1916.iso
http://goo.gl/Y7D1J :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-HV-20130430-2250.iso

Running your 2.1 andd RRD graph works out of the box! Yeayyy

Happy times!

hege

@PollyPy:

http://goo.gl/KzpV0 :: pfSense-LiveCD-2.0.3-RELEASE-amd64-HV-20130505-1916.iso
http://goo.gl/Y7D1J :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-HV-20130430-2250.iso

amazing, just testing the 2.0.3 iso and it seems pretty more stable. big big thanks!

Fehler20

Thank you!

svfusion

THANK YOU!

svfusion

what are the patch files for?

PollyPy

@svfusion:

what are the patch files for?

http://blog.chrisara.com.au/2012/08/hyper-v-integration-components-for_13.html
"Hyper-V Integration Components for FreeBSD – Patchfiles" - Chris Knight's FreeBSD patches

stiggle

Using the 2.0.3 HV image - I'm getting occasional crashes, but only noticing them as the GUI has the 'crashed report detected' message.

Intel(R) Xeon(R) CPU X5650 @ 2.67GHz
2 vCPU, 4Gb RAM, IDE disk, 4 vNIC

hege

Hi,

look for the string "sleeping thread" in your error log,
if you can find it, you can try this: (helped me a lot)

System / Advanced / Admin Access
Change Max Processes from 2 to 1

System / Advanced / System Tunables
Change vfs.read_max from default to 64 or 128 (not higher)

Reboot !

Please let me know if it helped you too.

Ps: i hope you are using the image from PollyPy

MrTbone

Hi

I´m running 2.1 on hyper-v 2012 since a week now.
Question, Can i upgrade online or will this break hyper-v integrations?

Also, I´m experience slow upload performance in squid with transparent Proxy.
If i enable transparent Proxy i get 5Mb/s if I disable 50Mb/s Download speed not affected.
Tried som optimization found in forum but no success.

No crash so far.

Fehler20

Question, Can i upgrade online or will this break hyper-v integrations?

I think this will break hyper-v integration.

Also, I´m experience slow upload performance in squid with transparent Proxy.
If i enable transparent Proxy i get 5Mb/s if I disable 50Mb/s Download speed not affected.
Tried som optimization found in forum but no success.

I can NOT confirm this. Maybe high cpu load?

nlitend1

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

Is this a limitation of the virtual network adapters? I am using standard network adapters (not legacy adapters). Am i possibly missing something in not changing anythign with the rules/establishing a hierarchy of traffic (outside of what the traffic shaping wizard does).

I am loving the virtualized pfsense and hope to continue using it, however traffic shaping (QOS) is one of my primary reasons for moving from a consumer based router with DD-WRT and I really hope I can get this working.

Thanks in advance for any help/advice!

hege

Do you talk about mbit or mbyte? :)

If its mbit i cant confirm this, i tested Trafficshapping (HFSC and PRIQ) with 12,5 mbyte real traffic per second.

If you want to configure HFSC with the wizard you can try to delete all floating rules, and then recreate them.

What hardware do you use? specially what NIC do you use?

nlitend1

@nlitend1:

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Below is an update to my post from a few days ago…(thanks for the reply hege) The updates are in bold.
Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I can confirm that traffic shaping works correctly in 2.1Beta. I tried everything i could to get the rules to work correctly in 2.0.3, but I could not get them to load without erroring. The speed limitation in 2.1 was due to no seting the LAN bandwith corrrectly. (I had it matched to the qInternet (download bandwidth) and that was split between the qLink and qInternet subsets and therefore limiting me. I am now getting 24.87megabits per second downloads.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

I was able to get the HSFC method working with 2.1 by adding a additional LAN rule for each que. See the following link:
http://www.hammerweb.com/blog/2011/09/traffic-shaper-in-pfsense-2-0/

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

**Thanks again to everyone who has posted solutions and fixes for running pfsense in hyper-v. It's a great solution. I'm looking forward to moving beyond the 2.1Beta as 2.1 seems very promising with IPv6 support becoming mainstream in the near future…

P.S. It does say that there is an update available...PollyPy any thoughts on releasing an updated version of 2.1?

EDIT: the calc run error appears to come back after reboot despite the above command in the sysctl.conf file, but it does work when run directly in shell. Any ideas to make this persistant?**

PollyPy

@nlitend1:

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

add into "System: Advanced: System Tunables" new value

Save and reboot

nlitend1

@PollyPy:

@nlitend1:

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

add into "System: Advanced: System Tunables" new value

Save and reboot

Thanks! Worked perfectly. Any plans on releasing a "hyper-V edition" of the latest release?

PollyPy

Ok. Here's my last ISO with a Hyper-V kernel

http://goo.gl/Ja36D :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-20130516-0018.iso

and my last Update source for pfSense-LiveCD-2.1 with a Hyper-V kernel

http://goo.gl/dEFjv :: latest1.tgz (2.1-RC0 (amd64) built on Thu May 23 20:43:32 EDT 2013)

Prosysaps

About to test the 2.0.3 with hyper-v kernel, can't get any VLAN capable interfaces with synthetic drivers, has anyone got this working? Im on a 2012 Hyper-V