Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Very slow traffic from other VM's through pfSense on XenServer

    Scheduled Pinned Locked Moved Virtualization
    47 Posts 23 Posters 57.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      Gr1pen
      last edited by

      My bad…

      I noticed tht the interfaces on 2 failing XenServer hosts was reordered for some reason. Correcting this solved my problem, hence it was not related to pfsense.

      I am thankful for your effort to help out and apologize for confusing you!

      1 Reply Last reply Reply Quote 0
      • ?
        Guest
        last edited by

        @Gr1pen:

        My bad…

        I noticed tht the interfaces on 2 failing XenServer hosts was reordered for some reason. Correcting this solved my problem, hence it was not related to pfsense.

        I am thankful for your effort to help out and apologize for confusing you!

        Glad you got it fixed!

        1 Reply Last reply Reply Quote 0
        • V
          viniciusferrao
          last edited by

          Just to keep this updated.

          This problem still happens on XenServer 7.0 with pfSense 2.3.1.

          1 Reply Last reply Reply Quote 0
          • ?
            Guest
            last edited by

            @viniciusferrao:

            Just to keep this updated.

            This problem still happens on XenServer 7.0 with pfSense 2.3.1.

            Yep, until it's fixed in upstream FreeBSD it won't get fixed, ever.

            1 Reply Last reply Reply Quote 0
            • G
              gothicman02
              last edited by

              @johnkeates:

              @viniciusferrao:

              Just to keep this updated.

              This problem still happens on XenServer 7.0 with pfSense 2.3.1.

              Yep, until it's fixed in upstream FreeBSD it won't get fixed, ever.

              Just figured I'd update this thread on these issues.  It looks like freebsd 11 is supporting dom0 support for xen, so hopefully these issues will be fixed.  I'm just getting a virtualized setup going with support ending for 32 bit here soon so I may try 2.4 of PFSense to see how it works out of the box with xen.

              Here is a link to the freebsd support, though it will be experimental at this stage:

              https://wiki.freebsd.org/Xen

              1 Reply Last reply Reply Quote 0
              • G
                gothicman02
                last edited by

                @johnkeates:

                @gothicman02:

                @johnkeates:

                @viniciusferrao:

                Just to keep this updated.

                This problem still happens on XenServer 7.0 with pfSense 2.3.1.

                Yep, until it's fixed in upstream FreeBSD it won't get fixed, ever.

                Just figured I'd update this thread on these issues.  It looks like freebsd 11 is supporting dom0 support for xen, so hopefully these issues will be fixed.  I'm just getting a virtualized setup going with support ending for 32 bit here soon so I may try 2.4 of PFSense to see how it works out of the box with xen.

                Here is a link to the freebsd support, though it will be experimental at this stage:

                https://wiki.freebsd.org/Xen

                I suppose that could actually fix the netback/netfront problems because it will be BSD on the other end too. Interesting.

                Yes very.  Although there is still some work to do.  I got the latest 2.4 snapshot running (as of March 18th) with FreeBSD 11.0-p8 under Xenserver 7.1 with all patches, and the issues with checksum offloading still exist.  Disabling it still fixes the issue through only on the rx and tx side, but I do believe there is a slight performance drop like others have said here.  I haven't tested local file transfers yet, but I do notice a slight drop in internet bandwidth.  I'll do more testing when I got time.

                1 Reply Last reply Reply Quote 0
                • L
                  Laban
                  last edited by

                  So as I understand it, we need an upstream fix from FreeBSD for this to be magically solved once and for all. What about workarounds? Can someone summarize what steps to take so we can add it to the Wiki under Virtualization / Xen?

                  Out of curiosity, is it the same with other environments, like KVM or ESXI?

                  1 Reply Last reply Reply Quote 0
                  • R
                    renanpro03
                    last edited by

                    Hi Guys, is this soluction necessary? I mean, I've already disabled the "hardware checksum offloading" and I'm running XS 7.2 with citrix DVSC... I just can't go thru the internet from my second server, all my VM's hosted in my pool master are working fine...
                    PFSENSE is my gateway running on master.

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      Yes. It is still necessary if you want to use the PV NICs.

                      You can also put this in /boot/loader.conf.local:

                      hw.xen.disable_pv_nics=1

                      Your interfaces will now present as reX and you will not have to make those VM checksum changes. But they won't be paravirtualized.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • C
                        clincks
                        last edited by

                        @bbmitch

                        I'm wondering... this thread is 4 years old... and problem is still there.
                        The trick xe vif-param-set uuid={uuid of vif} other-config:ethtool-tx="off" is still working also.

                        Any idea when this will be fixed?

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • R
                          rmostu
                          last edited by

                          Hello, I run my pfSense on XenServer. I edit both lan card

                          xe vif-param-set uuid=... other-config:ethtool-rx="off"
                          and
                          xe vif-param-set uuid=... other-config:ethtool-rx="on"

                          and speed of internet will be beter. But I still have problem with some pages (www) some pages open some pages don't open, some pages open very long and sometimes works fine :(.

                          Any idea ??

                          Thanks.

                          1 Reply Last reply Reply Quote 0
                          • werterW
                            werter
                            last edited by

                            Hi.

                            Much better
                            https://xcp-ng.org/ + https://xen-orchestra.com/docs/

                            1 Reply Last reply Reply Quote 0
                            • StefanAlbrechtS
                              StefanAlbrecht Banned @corotte
                              last edited by StefanAlbrecht

                              This post is deleted!
                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.