Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic

    Scheduled Pinned Locked Moved Plus 25.11 Snapshots
    51 Posts 4 Posters 771 Views 6 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N Online
      netblues @netblues
      last edited by

      Just tried the new 2611 rc version.
      The issue remains unchanged.

      1 Reply Last reply Reply Quote 1
      • w0wW Offline
        w0w
        last edited by

        @netblues said in pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic:

        2611 rc version.

        It looks like it’s working for me — I can reach the Internet through PPPoE on vtnet.

        N 1 Reply Last reply Reply Quote 0
        • N Online
          netblues @w0w
          last edited by

          @w0w Are you sure?It is definitely NOT fixed here.

          Cab you revert to previus rc and check that you have the issue there?

          w0wW 1 Reply Last reply Reply Quote 0
          • w0wW Offline
            w0w @netblues
            last edited by w0w

            @netblues
            Testing all variants right now, I'll let you know if I'll find something

            1 Reply Last reply Reply Quote 1
            • stephenw10S Offline
              stephenw10 Netgate Administrator
              last edited by

              Hmm, this would be interesting. AFAIK no specific fix for this went in since the beta. So if it is now working it must have pulled in a change with something else. 🤔

              N 1 Reply Last reply Reply Quote 0
              • N Online
                netblues @stephenw10
                last edited by

                @stephenw10 The only difference here is proxmox kvm vs redhat 9.6 kvm.
                I doubt there is a difference.

                I have tested with bios boot. Can do the same with uefi, but in previous rc, the issues where the same.

                @w0w Are you using uefi or bios boot? (and the relevant 440fx versus q35 hardware emulation)

                1 Reply Last reply Reply Quote 0
                • w0wW Offline
                  w0w
                  last edited by

                  a48e90b1-c4c1-47e9-a959-d3ee0b2a3138-image.png
                  Also, the Ookla Speedtest in Edge shows full speed.
                  Some specifics… This version was installed from the online installer with the configuration restored using the same installer.
                  When it booted for the first time, I had to go into Routes and manually switch the default IPv4 and IPv6 gateways to the PPPoE one, because I had the multi-WAN gateway set there. Before that it wasn’t working — or more precisely, it was working via the backup WAN gateway (I have a multi-WAN setup).

                  After forcing the PPPoE gateway, I checked that the Internet was reachable from a client. Then I went back and set the default gateway to the multi-WAN gateway again and verified that whatismyip still showed the PPPoE IP. After that I rebooted several times — everything continued to work correctly.

                  And issue remains on the previous RC version.

                  @netblues said in pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic:

                  @stephenw10 The only difference here is proxmox kvm vs redhat 9.6 kvm.
                  I doubt there is a difference.

                  I have tested with bios boot. Can do the same with uefi, but in previous rc, the issues where the same.

                  @w0w Are you using uefi or bios boot? (and the relevant 440fx versus q35 hardware emulation)

                  73a76b35-7978-43a0-a7a1-c5b8786208c2-image.png

                  I don't know... some kind of magic.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S Offline
                    stephenw10 Netgate Administrator
                    last edited by

                    Hmm, you are using if_pppoe on a lagg of vtnet rather than directly on vtnet. Possible difference. Have you always been running that?

                    w0wW 1 Reply Last reply Reply Quote 0
                    • w0wW Offline
                      w0w @stephenw10
                      last edited by w0w

                      @stephenw10
                      I’ve been running LAGGs in failover mode for years on literally every interface. This makes things simpler for HA and also for hardware changes.

                      In any case, when it wasn’t working, I tried every option—LAGG, direct connection, everything. I’m actually surprised it’s working now.

                      N 1 Reply Last reply Reply Quote 1
                      • N Online
                        netblues @w0w
                        last edited by

                        I have also tried q35 and uefi boot.
                        The issue remains.
                        Booting to anything lese than the last two beta/rc releases , with the same config works correctly.

                        w0wW 1 Reply Last reply Reply Quote 0
                        • w0wW Offline
                          w0w @netblues
                          last edited by

                          @netblues
                          I can't explain this. So you are using PPPoE (over vtnet) and clients on LAN can not reach internet?

                          N 1 Reply Last reply Reply Quote 0
                          • N Online
                            netblues @w0w
                            last edited by

                            @w0w Yes.
                            And at the same time, clients on the same hypervisor, bound to the same bridge to lan, using virtio, can reach the Internet fine.

                            Also clients on the physical lan, can ping the Internet over pppoe.

                            1 Reply Last reply Reply Quote 0
                            • w0wW Offline
                              w0w
                              last edited by

                              I was able to reproduce this bug: I installed 25.07.1, restored the configuration, verified that LAN clients had Internet access, and then upgraded to the latest RC. After the upgrade, the clients no longer had Internet access.
                              That's fun...

                              N 1 Reply Last reply Reply Quote 1
                              • N Online
                                netblues @w0w
                                last edited by

                                @w0w And most peobably can only ping too

                                w0wW 1 Reply Last reply Reply Quote 0
                                • w0wW Offline
                                  w0w @netblues
                                  last edited by

                                  @netblues
                                  Yes, like only ICMP working

                                  N 1 Reply Last reply Reply Quote 1
                                  • N Online
                                    netblues @w0w
                                    last edited by

                                    @w0w So we definitely have an issue here. It can't be a configuration issue, and certainly NOT a firewall rules issue.
                                    But I remain clueless where to look. (Besides the fact that I need to revert for practical reasons, and running another pf plus vm in parallel for testing has licensing issues too)

                                    w0wW 1 Reply Last reply Reply Quote 0
                                    • w0wW Offline
                                      w0w @netblues
                                      last edited by

                                      @netblues
                                      I dug a bit deeper. I compared the system that was installed from scratch with the one that was upgraded. Of course, things went a bit sideways, but overall there are noticeable differences in both libraries and some binaries, which raises some questions — although in general this could simply be a consequence of the FreeBSD version upgrade.
                                      By the way, have you tried installing it using the Netgate installer?

                                      N 1 Reply Last reply Reply Quote 0
                                      • N Online
                                        netblues @w0w
                                        last edited by

                                        @w0w So you say that by doing a clean default install with netgate installer AND restoring the config would work in latest RC?

                                        Can't check this right now, someone might shoot me and it would be netgates fault 😱

                                        w0wW 1 Reply Last reply Reply Quote 1
                                        • w0wW Offline
                                          w0w @netblues
                                          last edited by

                                          @netblues said in pfSense VM on Proxmox: PPPoE only works when parent NIC is PCI passthrough — virtual NIC breaks LAN→WAN traffic:

                                          So you say that by doing a clean default install with netgate installer AND restoring the config would work in latest RC?

                                          It worked once at least, but I didn’t try it again 😊

                                          N 1 Reply Last reply Reply Quote 0
                                          • N Online
                                            netblues @w0w
                                            last edited by netblues

                                            @w0w Brewing... I know in a while

                                            Nada. Issue remains the same. I installed directly into latest rc 25.11.r.20251126.1732
                                            and restored config.

                                            Only ping over pppoe.

                                            w0wW 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.