pfSense on ESXi | Best Practices

mohkhalifa

Thanks @kiokoman for you help, really appropriated. But why when I directly connected the WAN without pfSense everything goes fine ? also I tried to change the adapter type from e1000 to VMNET3 and the same problem !!

Rico

Again: Latest VMware Tools installed?

-Rico

mohkhalifa

@Rico yes sure

mohkhalifa

@Rico Open-VM-Tools v10.1.0_2,1

kiokoman

did you set traffic shaping or load balancing on the vswitch ?

mohkhalifa

@kiokoman NO

kiokoman

i'm tring to mess as much as i can with my vm but i'm unable to reproduce it
can you do a test with pfsense 2.5.0-devel ?
also i found this about the vmx driver
https://www.freebsd.org/cgi/man.cgi?query=vmx&sektion=4
ethernet0.virtualDev="vmxnet3" i have it inside the virtual machine configuration and
The hw.pci.honor_msi_blacklist tunable must be disabled to enable MSI-X support.
i have it set on my
/boot/loader.conf.local

hw.pci.honor_msi_blacklist="0"

also i found this but idk if it's still relevant
https://forum.netgate.com/topic/88082/esxi-5-5-packet-loss/12

bbrendon

I have a bunch of pfsense instances running in ESXi. No issues. All 2.4.4-p3 and 2.4.5-RC.

Rico

Yeah I don't think this problem is pfSense related.
Can you spin up two more VMs for testing? One with vanilla FreeBSD 11.2 and another with Linux or Windows. Check if the timeouts happen in one or both test VMs.

-Rico

mohkhalifa

problem SOLVED after "Disabling hardware checksum offload"

kiokoman

i told you 4 days ago to disable cso "esxcli network nic cso set --enable=0 -n vmnic0"
but i forgot to tell you to disable it from the pfsense gui

mohkhalifa

@kiokoman

bbrendon

@mohkhalifa said in pfSense on ESXi | Best Practices:

problem SOLVED after "Disabling hardware checksum offload"

Awesome. I poked around on a few of mine and didn't find any with that enabled. Mostly Dell hardware here. Good find.