Pfsense behind virtualization

ozid

Hello everyone,

I have a strange bandwitch problem, maybe someone can help me with that,

I have a cloud Hyper-v server with wan ip adress as local network with two pfsense virtualized and one computer behind pfsense

Both of the pfsense have a wan ip adress, the gateway ip is my hyper-v.

If i make a speedtest from my hyper-v:
Download 639 Mbps
Upload: 600 Mbps

If i make a speedtest on the computer behind one pfsense i have:
Download: no more than 100 Mbps, some time 30 Mbps.
Upload: 500-600 Mbps

Do you have any ideas why my upload speed is that low?
I already check system log, performances, and everything seem to be ok

Thanks for taking a look !

Guest

I have a cloud Hyper-v server with wan ip adress as local network with two pfsense virtualized and one computer behind pfsense

Would you draw a small network schematic for us to be more clear, please?

If i make a speedtest from my hyper-v:
Download 639 Mbps
Upload: 600 Mbps

Yes but this is without SPI & NAT and firewall rules and all that must be performed!!!

If i make a speedtest on the computer behind one pfsense i have:
Download: no more than 100 Mbps, some time 30 Mbps.
Upload: 500-600 Mbps

Configuration false or failure perhaps? Is this a HA configuration or what is it?
Is there load balancing inside over both devices or only one active device?

Do you have any ideas why my upload speed is that low?
I already check system log, performances, and everything seem to be ok

Take more cpu cores & RAM to the VMs and test it again.

johnpoz

Yeah why do you have 2 pfsense vms? You have them setup as carp? On the same hyper-v box?

Their gateway is your hyper-v?? Huh?? So they are behind some nat your hyper-v is going, and then natting again to vms behind your pfsense vms?

ozid

Hello guys, thanks for reply !!! Maybe my network should not be like that, i make a visio.

I try with more CPU and more RAM but still the same
I have one pfsense for my own buissness and one for the client
(not the same ip)

Drawing1.jpg_thumb

provels

FWIW, and I'm not really a Hyper-V expert, but I saw a similar performance hit when I built a pfSense FW on my 2008 R2 server. I had to use the legacy NICs, but they are supposed to be capable of 100 Mb anyway. My pipe is 100 Mb and I can achieve 96 Mb at Speedtest.net through my lowly 10 year old Via C7 appliance, but only 20-30 Mb with the VM. I was hoping to replace the old hardware soon since x86 pfSense will go away with 2.4.