IPSec and Generic Troughput issues with 2.4 on vmware with vmxnet - this helps
-
After the update from 2.3 to 2.4 on some of our virtualized pfSense clusters we noticed that IPSec performance dropped rapidly from 500 Mbit/s to less then 100 Mbit/s for some links. Also generic routing troughput decreased imense.
After a while of digging on the systems i noticed that there are no network queues visible for the vmxnet driver in top -aSH.
Adding this:
hw.pci.honor_msi_blacklist=0
to /boot/loader.conf.local and a reboot restored pre 2.3 performance levels.
hopefully that helps someone here. Maybe that should be added as option to the GUI to enable somewhere in 2.4