IPSec and Generic Troughput issues with 2.4 on vmware with vmxnet - this helps
-
After the update from 2.3 to 2.4 on some of our virtualized pfSense clusters we noticed that IPSec performance dropped rapidly from 500 Mbit/s to less then 100 Mbit/s for some links. Also generic routing troughput decreased imense.
After a while of digging on the systems i noticed that there are no network queues visible for the vmxnet driver in top -aSH.
Adding this:
hw.pci.honor_msi_blacklist=0
to /boot/loader.conf.local and a reboot restored pre 2.3 performance levels.
hopefully that helps someone here. Maybe that should be added as option to the GUI to enable somewhere in 2.4
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.