Hyper-V integration installed with pfSense 2.0.1

[nlitend1]

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

• Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

Is this a limitation of the virtual network adapters? I am using standard network adapters (not legacy adapters). Am i possibly missing something in not changing anythign with the rules/establishing a hierarchy of traffic (outside of what the traffic shaping wizard does).

I am loving the virtualized pfsense and hope to continue using it, however traffic shaping (QOS) is one of my primary reasons for moving from a consumer based router with DD-WRT and I really hope I can get this working.

Thanks in advance for any help/advice!

[hege]

Do you talk about mbit or mbyte? :)

If its mbit i cant confirm this, i tested Trafficshapping (HFSC and PRIQ) with 12,5 mbyte real traffic per second.

If you want to configure HFSC with the wizard you can try to delete all floating rules, and then recreate them.

What hardware do you use? specially what NIC do you use?

[nlitend1]

@nlitend1:

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

• Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Below is an update to my post from a few days ago…(thanks for the reply hege) The updates are in bold.
Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I can confirm that traffic shaping works correctly in 2.1Beta. I tried everything i could to get the rules to work correctly in 2.0.3, but I could not get them to load without erroring. The speed limitation in 2.1 was due to no seting the LAN bandwith corrrectly. (I had it matched to the qInternet (download bandwidth) and that was split between the qLink and qInternet subsets and therefore limiting me. I am now getting 24.87megabits per second downloads.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

I was able to get the HSFC method working with 2.1 by adding a additional LAN rule for each que. See the following link:
http://www.hammerweb.com/blog/2011/09/traffic-shaper-in-pfsense-2-0/

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

**Thanks again to everyone who has posted solutions and fixes for running pfsense in hyper-v. It's a great solution. I'm looking forward to moving beyond the 2.1Beta as 2.1 seems very promising with IPv6 support becoming mainstream in the near future…

P.S. It does say that there is an update available...PollyPy any thoughts on releasing an updated version of 2.1?

EDIT: the calc run error appears to come back after reboot despite the above command in the sysctl.conf file, but it does work when run directly in shell. Any ideas to make this persistant?**

[PollyPy]

@nlitend1:

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

add into "System: Advanced: System Tunables" new value

Save and reboot

[nlitend1]

@PollyPy:

@nlitend1:

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

add into "System: Advanced: System Tunables" new value

Save and reboot

Thanks! Worked perfectly. Any plans on releasing a "hyper-V edition" of the latest release?

[PollyPy]

Ok. Here's my last ISO with a Hyper-V kernel

http://goo.gl/Ja36D :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-20130516-0018.iso

and my last Update source for pfSense-LiveCD-2.1 with a Hyper-V kernel

http://goo.gl/dEFjv :: latest1.tgz (2.1-RC0  (amd64) built on Thu May 23 20:43:32 EDT 2013)

[Prosysaps]

About to test the 2.0.3 with hyper-v kernel, can't get any VLAN capable interfaces with synthetic drivers, has anyone got this working? Im on a 2012 Hyper-V

[nlitend1]

@PollyPy:

Ok. Here's my last ISO with a Hyper-V kernel

http://goo.gl/Ja36D :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-20130516-0018.iso

and my last Update source for pfSense-LiveCD-2.1 with a Hyper-V kernel

http://goo.gl/dEFjv :: latest1.tgz (2.1-RC0  (amd64) built on Thu May 23 20:43:32 EDT 2013)

Is the update source the file that can be used to do an inplace update without breaking things? i.e., i'm on 2.1 BETA 1 released April 30th. (your hyper-v release on the previous page) Can i just use the update source to do an in place manual upgrade?

[stiggle]

@hege:

Hi,

look for the string "sleeping thread" in your error log,
if you can find it, you can try this: (helped me a lot)

System / Advanced / Admin Access
  Change Max Processes from 2 to 1

System / Advanced / System Tunables
Change vfs.read_max from default to 64 or 128 (not higher)

Reboot !

Please let me know if it helped you too.

Ps: i hope you are using the image from PollyPy

Sorry for taking a while to get back…
I've got "sleeping thread" - made the changes, still got crashes :-(

[hege]

@Prosysaps:

About to test the 2.0.3 with hyper-v kernel, can't get any VLAN capable interfaces with synthetic drivers, has anyone got this working? Im on a 2012 Hyper-V

do you mean the pfsense vlan settings?
You can (should) use the hyper-v vlan settings, which you can change with the hyper-v manager.

[stiggle]

Good news is this VM (in Hyper-V 2012) is now staying up for a few hours.
Bad new is its still making crash dumps :-(
Panic String: bpf_copy

[stroyerdk]

I can force craches when having an internal webserver and with DNS Reflection enabled on the virtual pfSense.

Refreshing the website 2-3 times in a row causes a kernel panic and a reboot.

I have taken down, and replaced the virtual pfSense for now, as this is not optimal :-)

/Kind regards

[hege]

Hi,

anyone with a working CARP setup?

i tried now for hours, but no luck,
it seems that the same problem with the "de" driver still exists with the "hn" driver…

i get the "fa_add_loopback_route: insertion failed" message and carp stuck at init

more info here:
http://forum.pfsense.org/index.php?topic=44550.0
http://forum.pfsense.org/index.php?topic=44529.0

[Dennis Westhuis]

Same problem here :-\

Even after enable Mac spoofing….

This is a big showstopper for us!

[draculea]

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

• Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Hello all,

i have successfully deployed the latest image to Hyper-v and after a few days of tests i decided to use it in my home router until in becomes RC or final.

All works well apparently except the traffic shaping. I have seen the post i quoted but i am completely new to this and i have not managed to make the necessary changes.

Pretty please, could someone guide me in detail how to manage to work out the wizard error?

Regards

[hege]

Navigate to shell (from the pfsense menu - menukey 8 i think)

vi /etc/inc/interfaces.inc

Esc + ?altq - return
(Esc + ? is the searchfunction from vi - editor, and we search for the string "altq")

navigate to the array, which you can see in the attached image,
type Esc + i (now you can write)

add the string "hn", to the array, after that save your changes with Esc + :wq - return

If you have problems with the vi editor - here you can find a good reference http://www.lagmonster.org/docs/vi.html

[draculea]

Many many thanks,

i have succeed in the first try, thanks to your tutorial. It would have been impossible by myself or lots of hours of study to figure that one out.

I am working my way to reading more stuff about traffic shaping.

Thanks again

[zootie]

Sorry I've been away. Busy with life, you know. Trying to catch up. It's good to see that the drivers are working for most, albeit they haven't been perfect.

@PollyPy, thank you for keeping up and making updated ISOs.

I'll try and test CARP, to see if it works any better on my setup. However, testing on 2 separate Hyper-V servers might require some more hardware than I have available in the near future.

In the meantime, if you can't get CARP working, an alternative would be to use a Windows cluster (presumably, if you want to use CARP with pfsense under Hyper-V, it is because you have at least 2 Hyper-V servers and want to add redundancy). You don't even need specialized shared storage: You can build an inexpensive cluster using StarWind's "Native SAN for Hyper-V Free Edition" (http://www.starwindsoftware.com/native-san-for-hyper-v-free-edition).

You might not be able to store your other VMs on the free edition shared drive (for that, you'd have to look at the paid products or actual shared storage hardware), but the free edition storage is more than enough to accommodate a pfSense VM. You can still keep your other VMs on each cluster node, they just won't fail over (just the pfSense VM). Also, you might need to reconfigure any Hyper-V replicas you have setup, since the Hyper-V Replica service will be moved under the cluster (still dealing with this).

[hege]

Thanks for your answer, i tried CARP with two virtualized VMs on one physical hyper-v server (yeah i know - make no sense)
I did this with and without dedicated nics (tried all hyper-v 2012 switch options)
My goal ist to use one hyper-v pfense setup as primaray and a old and slow box as failover, which sync with carp, so unfortunately i cant use a windows cluster.

[wbrauner]

Hi at all,

is there a new version for 2.1 update and full iso

thanks

wbrauner