Pfsense behind virtualization



  • Hello everyone,

    I have a strange bandwitch problem, maybe someone can help me with that,

    I have a cloud Hyper-v server with wan ip adress as local network with two pfsense virtualized and one computer behind pfsense

    Both of the pfsense have a wan ip adress, the gateway ip is my hyper-v.

    If i make a speedtest from my hyper-v:
    Download 639 Mbps
    Upload: 600 Mbps

    If i make a speedtest on the computer behind one pfsense i have:
    Download: no more than 100 Mbps, some time 30 Mbps.
    Upload: 500-600 Mbps

    Do you have any ideas why my upload speed is that low?
    I already check system log, performances, and everything seem to be ok

    Thanks for taking a look !



  • I have a cloud Hyper-v server with wan ip adress as local network with two pfsense virtualized and one computer behind pfsense

    Would you draw a small network schematic for us to be more clear, please?

    If i make a speedtest from my hyper-v:
    Download 639 Mbps
    Upload: 600 Mbps

    Yes but this is without SPI & NAT and firewall rules and all that must be performed!!!

    If i make a speedtest on the computer behind one pfsense i have:
    Download: no more than 100 Mbps, some time 30 Mbps.
    Upload: 500-600 Mbps

    Configuration false or failure perhaps? Is this a HA configuration or what is it?
    Is there load balancing inside over both devices or only one active device?

    Do you have any ideas why my upload speed is that low?
    I already check system log, performances, and everything seem to be ok

    Take more cpu cores & RAM to the VMs and test it again.


  • LAYER 8 Global Moderator

    Yeah why do you have 2 pfsense vms?  You have them setup as carp?  On the same hyper-v box?

    Their gateway is your hyper-v??  Huh??  So they are behind some nat your hyper-v is going, and then natting again to vms behind your pfsense vms?



  • Hello guys, thanks for reply !!! Maybe my network should not be like that, i make a visio.

    I try with more CPU and more RAM but still the same
    I have one pfsense for my own buissness and one for the client
    (not the same ip)




  • FWIW, and I'm not really a Hyper-V expert, but I saw a similar performance hit when I built a pfSense FW on my 2008 R2 server.  I had to use the legacy NICs, but they are supposed to be capable of 100 Mb anyway.  My pipe is 100 Mb and I can achieve 96 Mb at Speedtest.net through my lowly 10 year old Via C7 appliance, but only 20-30 Mb with the VM.  I was hoping to replace the old hardware soon since x86 pfSense will go away with 2.4.


Log in to reply