Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Very slow traffic from other VM's through pfSense on XenServer

    Scheduled Pinned Locked Moved Virtualization
    47 Posts 23 Posters 57.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      Guest
      last edited by

      @Gr1pen:

      My bad…

      I noticed tht the interfaces on 2 failing XenServer hosts was reordered for some reason. Correcting this solved my problem, hence it was not related to pfsense.

      I am thankful for your effort to help out and apologize for confusing you!

      Glad you got it fixed!

      1 Reply Last reply Reply Quote 0
      • V
        viniciusferrao
        last edited by

        Just to keep this updated.

        This problem still happens on XenServer 7.0 with pfSense 2.3.1.

        1 Reply Last reply Reply Quote 0
        • ?
          Guest
          last edited by

          @viniciusferrao:

          Just to keep this updated.

          This problem still happens on XenServer 7.0 with pfSense 2.3.1.

          Yep, until it's fixed in upstream FreeBSD it won't get fixed, ever.

          1 Reply Last reply Reply Quote 0
          • G
            gothicman02
            last edited by

            @johnkeates:

            @viniciusferrao:

            Just to keep this updated.

            This problem still happens on XenServer 7.0 with pfSense 2.3.1.

            Yep, until it's fixed in upstream FreeBSD it won't get fixed, ever.

            Just figured I'd update this thread on these issues.  It looks like freebsd 11 is supporting dom0 support for xen, so hopefully these issues will be fixed.  I'm just getting a virtualized setup going with support ending for 32 bit here soon so I may try 2.4 of PFSense to see how it works out of the box with xen.

            Here is a link to the freebsd support, though it will be experimental at this stage:

            https://wiki.freebsd.org/Xen

            1 Reply Last reply Reply Quote 0
            • G
              gothicman02
              last edited by

              @johnkeates:

              @gothicman02:

              @johnkeates:

              @viniciusferrao:

              Just to keep this updated.

              This problem still happens on XenServer 7.0 with pfSense 2.3.1.

              Yep, until it's fixed in upstream FreeBSD it won't get fixed, ever.

              Just figured I'd update this thread on these issues.  It looks like freebsd 11 is supporting dom0 support for xen, so hopefully these issues will be fixed.  I'm just getting a virtualized setup going with support ending for 32 bit here soon so I may try 2.4 of PFSense to see how it works out of the box with xen.

              Here is a link to the freebsd support, though it will be experimental at this stage:

              https://wiki.freebsd.org/Xen

              I suppose that could actually fix the netback/netfront problems because it will be BSD on the other end too. Interesting.

              Yes very.  Although there is still some work to do.  I got the latest 2.4 snapshot running (as of March 18th) with FreeBSD 11.0-p8 under Xenserver 7.1 with all patches, and the issues with checksum offloading still exist.  Disabling it still fixes the issue through only on the rx and tx side, but I do believe there is a slight performance drop like others have said here.  I haven't tested local file transfers yet, but I do notice a slight drop in internet bandwidth.  I'll do more testing when I got time.

              1 Reply Last reply Reply Quote 0
              • L
                Laban
                last edited by

                So as I understand it, we need an upstream fix from FreeBSD for this to be magically solved once and for all. What about workarounds? Can someone summarize what steps to take so we can add it to the Wiki under Virtualization / Xen?

                Out of curiosity, is it the same with other environments, like KVM or ESXI?

                1 Reply Last reply Reply Quote 0
                • R
                  renanpro03
                  last edited by

                  Hi Guys, is this soluction necessary? I mean, I've already disabled the "hardware checksum offloading" and I'm running XS 7.2 with citrix DVSC... I just can't go thru the internet from my second server, all my VM's hosted in my pool master are working fine...
                  PFSENSE is my gateway running on master.

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    Yes. It is still necessary if you want to use the PV NICs.

                    You can also put this in /boot/loader.conf.local:

                    hw.xen.disable_pv_nics=1

                    Your interfaces will now present as reX and you will not have to make those VM checksum changes. But they won't be paravirtualized.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • C
                      clincks
                      last edited by

                      @bbmitch

                      I'm wondering... this thread is 4 years old... and problem is still there.
                      The trick xe vif-param-set uuid={uuid of vif} other-config:ethtool-tx="off" is still working also.

                      Any idea when this will be fixed?

                      Thanks

                      1 Reply Last reply Reply Quote 0
                      • R
                        rmostu
                        last edited by

                        Hello, I run my pfSense on XenServer. I edit both lan card

                        xe vif-param-set uuid=... other-config:ethtool-rx="off"
                        and
                        xe vif-param-set uuid=... other-config:ethtool-rx="on"

                        and speed of internet will be beter. But I still have problem with some pages (www) some pages open some pages don't open, some pages open very long and sometimes works fine :(.

                        Any idea ??

                        Thanks.

                        1 Reply Last reply Reply Quote 0
                        • werterW
                          werter
                          last edited by

                          Hi.

                          Much better
                          https://xcp-ng.org/ + https://xen-orchestra.com/docs/

                          1 Reply Last reply Reply Quote 0
                          • StefanAlbrechtS
                            StefanAlbrecht Banned @corotte
                            last edited by StefanAlbrecht

                            This post is deleted!
                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.