Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Inter-VLAN AND Gigabit Speed?

    Scheduled Pinned Locked Moved General pfSense Questions
    5 Posts 3 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      seed
      last edited by

      I am testing a new config and am wondering if I have a good enough CPU for inter vlan @ 1gbit. It's a Lanner device which has served me very well with a C2358(dual-core) CPU @ 1.7GHz.

      Copying data from 2 powerful NAS boxes, I can only seem to get about 40MB throughput peak, from VLAN 1 to VLAN 2. I am wondering if this CPU can support gbit data transfer inter vlan. I do see some intr on the vlan intefaces at times as well.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Without knowing more about the NICs, packet sizes, etc, it's impossible to say. Jumbo frame support might help there, but it's tough to say without more info.

        Honestly, though, you should not have NAS traffic flowing through a firewall or router. If you need VLAN-to-VLAN performance then you need an L3 routing switch.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          are you vlans on the same physical nic, so your hairpinning - that for sure will not help performance.  But as jimp mentions running traffic through a firewall will be a performance hit.  Devices that need full wire speed between them should prob be best on the same layer 2 so your only switching the traffic.  If you do need to route it, prob best to use a L3 switch to route that traffic.

          40MB does seem a bit low, but many factors come into play.  Is there a hairpin, packet size, what protocol I assume smb?  So lets do some rough math 40MB so roughly 320mbps, if you are hairpinning your at 640mbps for that interface.  Which prob isn't all that shabby for running through a low power router/firewall.  what are the nics involved?  When you move the traffic what is pfsense cpu doing?  Is it pegging?

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          1 Reply Last reply Reply Quote 0
          • S
            seed
            last edited by

            @johnpoz:

            are you vlans on the same physical nic, so your hairpinning - that for sure will not help performance.  But as jimp mentions running traffic through a firewall will be a performance hit.  Devices that need full wire speed between them should prob be best on the same layer 2 so your only switching the traffic.  If you do need to route it, prob best to use a L3 switch to route that traffic.

            40MB does seem a bit low, but many factors come into play.  Is there a hairpin, packet size, what protocol I assume smb?  So lets do some rough math 40MB so roughly 320mbps, if you are hairpinning your at 640mbps for that interface.  Which prob isn't all that shabby for running through a low power router/firewall.  what are the nics involved?  When you move the traffic what is pfsense cpu doing?  Is it pegging?

            They are on different NICs after a discussion in another thread I changed the model to not use VLANs in pfSense but only on the switch and use physical NICs to separate the network at the pfSense layer. This was simply a test of between VLAN performance and I am hoping to achieve a goal of being able to get full 100MB link across VLANs. When I get data from the NAS that is on a separate VLAN as a client, copying movie files over gbe to a mac, I want to make sure I can get it at full speed. That's my end goal. Most services for the NAS will be maintained within its network for media plex streaming to an AppleTV, backup to another device and a few other services. Another VLAN maintains the cameras with a feed over another VLAN to the NAS devices with no outbound connectivity.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              What are the nics?  What is pfsense cpu doing when you start a large transfer..  Does is peg?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.