Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Slow internet speed with pfSense virtualized under Proxmox on Zimaboard 832

    Scheduled Pinned Locked Moved Virtualization
    virtualizationproxmoxzimaboardpfsense 2.7
    12 Posts 5 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Urbaman75U
      Urbaman75 @brainolution
      last edited by

      This post is deleted!
      Urbaman75U 1 Reply Last reply Reply Quote 0
      • Urbaman75U
        Urbaman75 @Urbaman75
        last edited by

        This post is deleted!
        bmeeksB 1 Reply Last reply Reply Quote 0
        • bmeeksB
          bmeeks @Urbaman75
          last edited by

          @Urbaman75 said in Slow internet speed with pfSense virtualized under Proxmox on Zimaboard 832:

          So my problem seems to be Suricata-related, stopping it the throughput get up to 2G!

          Is there a way to get Suricata faster?

          Use fewer rules. Most users wind up enabling far more rules than are actually needed. Evaluate the exposed vulnerabilities in your network and only enable rules that cover those scenarios. For example, if you don't run a web server, email server, or public DNS server, then all the rule categories related to those vulnerabilities are not needed and should not be enabled.

          I see you appear to have a Bridge interface enabled (vmbr0). Suricata is not going to play well with that setup. It wants to run on native physical interfaces and not virtual ones (a bridge is a type of virtual interface).

          You can also try swapping the RUN MODE on the INTERFACE SETTINGS tab to "workers" from "autoFP". Sometimes that can help, but usually more so when using Inline IPS Mode.

          Urbaman75U 1 Reply Last reply Reply Quote 1
          • Urbaman75U
            Urbaman75 @bmeeks
            last edited by

            This post is deleted!
            bmeeksB Bob.DigB 2 Replies Last reply Reply Quote 0
            • bmeeksB
              bmeeks @Urbaman75
              last edited by

              @Urbaman75: yes, if the virtual NIC is single-queue only that will certainly impact throughput.

              1 Reply Last reply Reply Quote 0
              • Bob.DigB
                Bob.Dig LAYER 8 @Urbaman75
                last edited by Bob.Dig

                @Urbaman75 Have you tried turning "Multiqueue" on and off for the VirtIO paravirtualized NIC, to see if it makes any difference?

                Urbaman75U T 2 Replies Last reply Reply Quote 0
                • Urbaman75U
                  Urbaman75 @Bob.Dig
                  last edited by

                  This post is deleted!
                  B 1 Reply Last reply Reply Quote 0
                  • B
                    brainolution @Urbaman75
                    last edited by

                    @Urbaman75 You have completely hijacked my thread. Mine was in the context of my newly purchased Zimaboard.

                    Could you please create a new thread of your own and delete your comments so I could get the space?

                    Urbaman75U 1 Reply Last reply Reply Quote 2
                    • Urbaman75U
                      Urbaman75 @brainolution
                      last edited by

                      @brainolution done, deleted my comments, sorry for having taken up your space

                      1 Reply Last reply Reply Quote 1
                      • T
                        tibere86 @Bob.Dig
                        last edited by

                        @Bob-Dig - How do you enable MULTIQUEUE on Proxmox with VirtIO NICs? I have tried this to no avail. Even though I enable the setting in the VirtIO NICS, pfSense does not see it and still reverts to a single (1) queue.

                        B 1 Reply Last reply Reply Quote 0
                        • B
                          brainolution @tibere86
                          last edited by

                          @tibere86 Please create a new post for your question. Thanks.

                          1 Reply Last reply Reply Quote 0
                          • T tschan referenced this topic on
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.