pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic
-
Would you share the content/output of the following when it's working and when it's not?
- Generated OpenVPN config, e.g.:
/var/etc/openvpn/server1/config.ovpn - Filter rules:
pfctl -a '*' -se; pfctl -a '*' -sn; pfctl -a '*' -sr
You can upload it here:
https://nc.netgate.com/nextcloud/s/8CQAsHwwooTRAPt - Generated OpenVPN config, e.g.:
-
@marcosm Since I'm the only one reporting the issue with openvpn,
I have uploaded the requested info.However, testing further reveals that dco enabled client connection doesn't work only if the vpn is established over pppoe internet connection.
if the dco enabled openvp connection uses dhcp wan, then openvpn works fine.
So, opevpn client without dco works over pppoe connection from a non virtual pc, while at the same time , the same pc can only ping anything on the Internet but fails on anything else.
-
Just tried the new 2611 rc version.
The issue remains unchanged. -
@netblues said in pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic:
2611 rc version.
It looks like it’s working for me — I can reach the Internet through PPPoE on vtnet.
-
@w0w Are you sure?It is definitely NOT fixed here.
Cab you revert to previus rc and check that you have the issue there?
-
@netblues
Testing all variants right now, I'll let you know if I'll find something -
Hmm, this would be interesting. AFAIK no specific fix for this went in since the beta. So if it is now working it must have pulled in a change with something else.
-
@stephenw10 The only difference here is proxmox kvm vs redhat 9.6 kvm.
I doubt there is a difference.I have tested with bios boot. Can do the same with uefi, but in previous rc, the issues where the same.
@w0w Are you using uefi or bios boot? (and the relevant 440fx versus q35 hardware emulation)
-
Also, the Ookla Speedtest in Edge shows full speed.
Some specifics… This version was installed from the online installer with the configuration restored using the same installer.
When it booted for the first time, I had to go into Routes and manually switch the default IPv4 and IPv6 gateways to the PPPoE one, because I had the multi-WAN gateway set there. Before that it wasn’t working — or more precisely, it was working via the backup WAN gateway (I have a multi-WAN setup).After forcing the PPPoE gateway, I checked that the Internet was reachable from a client. Then I went back and set the default gateway to the multi-WAN gateway again and verified that whatismyip still showed the PPPoE IP. After that I rebooted several times — everything continued to work correctly.
And issue remains on the previous RC version.
@netblues said in pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic:
@stephenw10 The only difference here is proxmox kvm vs redhat 9.6 kvm.
I doubt there is a difference.I have tested with bios boot. Can do the same with uefi, but in previous rc, the issues where the same.
@w0w Are you using uefi or bios boot? (and the relevant 440fx versus q35 hardware emulation)
I don't know... some kind of magic.
-
Hmm, you are using if_pppoe on a lagg of vtnet rather than directly on vtnet. Possible difference. Have you always been running that?
-
@stephenw10
I’ve been running LAGGs in failover mode for years on literally every interface. This makes things simpler for HA and also for hardware changes.In any case, when it wasn’t working, I tried every option—LAGG, direct connection, everything. I’m actually surprised it’s working now.
-
I have also tried q35 and uefi boot.
The issue remains.
Booting to anything lese than the last two beta/rc releases , with the same config works correctly. -
@netblues
I can't explain this. So you are using PPPoE (over vtnet) and clients on LAN can not reach internet? -
@w0w Yes.
And at the same time, clients on the same hypervisor, bound to the same bridge to lan, using virtio, can reach the Internet fine.Also clients on the physical lan, can ping the Internet over pppoe.
-
I was able to reproduce this bug: I installed 25.07.1, restored the configuration, verified that LAN clients had Internet access, and then upgraded to the latest RC. After the upgrade, the clients no longer had Internet access.
That's fun... -
@w0w And most peobably can only ping too
-
@netblues
Yes, like only ICMP working -
@w0w So we definitely have an issue here. It can't be a configuration issue, and certainly NOT a firewall rules issue.
But I remain clueless where to look. (Besides the fact that I need to revert for practical reasons, and running another pf plus vm in parallel for testing has licensing issues too) -
@netblues
I dug a bit deeper. I compared the system that was installed from scratch with the one that was upgraded. Of course, things went a bit sideways, but overall there are noticeable differences in both libraries and some binaries, which raises some questions — although in general this could simply be a consequence of the FreeBSD version upgrade.
By the way, have you tried installing it using the Netgate installer? -
@w0w So you say that by doing a clean default install with netgate installer AND restoring the config would work in latest RC?
Can't check this right now, someone might shoot me and it would be netgates fault
