Hyper-V integration installed with pfSense 2.0.1

stiggle

Using the 2.0.3 HV image - I'm getting occasional crashes, but only noticing them as the GUI has the 'crashed report detected' message.

Intel(R) Xeon(R) CPU X5650 @ 2.67GHz
2 vCPU, 4Gb RAM, IDE disk, 4 vNIC

hege

Hi,

look for the string "sleeping thread" in your error log,
if you can find it, you can try this: (helped me a lot)

System / Advanced / Admin Access
Change Max Processes from 2 to 1

System / Advanced / System Tunables
Change vfs.read_max from default to 64 or 128 (not higher)

Reboot !

Please let me know if it helped you too.

Ps: i hope you are using the image from PollyPy

MrTbone

Hi

I´m running 2.1 on hyper-v 2012 since a week now.
Question, Can i upgrade online or will this break hyper-v integrations?

Also, I´m experience slow upload performance in squid with transparent Proxy.
If i enable transparent Proxy i get 5Mb/s if I disable 50Mb/s Download speed not affected.
Tried som optimization found in forum but no success.

No crash so far.

Fehler20

Question, Can i upgrade online or will this break hyper-v integrations?

I think this will break hyper-v integration.

Also, I´m experience slow upload performance in squid with transparent Proxy.
If i enable transparent Proxy i get 5Mb/s if I disable 50Mb/s Download speed not affected.
Tried som optimization found in forum but no success.

I can NOT confirm this. Maybe high cpu load?

nlitend1

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

Is this a limitation of the virtual network adapters? I am using standard network adapters (not legacy adapters). Am i possibly missing something in not changing anythign with the rules/establishing a hierarchy of traffic (outside of what the traffic shaping wizard does).

I am loving the virtualized pfsense and hope to continue using it, however traffic shaping (QOS) is one of my primary reasons for moving from a consumer based router with DD-WRT and I really hope I can get this working.

Thanks in advance for any help/advice!

hege

Do you talk about mbit or mbyte? :)

If its mbit i cant confirm this, i tested Trafficshapping (HFSC and PRIQ) with 12,5 mbyte real traffic per second.

If you want to configure HFSC with the wizard you can try to delete all floating rules, and then recreate them.

What hardware do you use? specially what NIC do you use?

nlitend1

@nlitend1:

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Below is an update to my post from a few days ago…(thanks for the reply hege) The updates are in bold.
Thanks for this. The interfaces showed up exactly as you said they would. I have scoured the forums and can't find any info on the following issues I am having…

I am having trouble with the traffic shapping and i'm wondering if anyone has has it work and has decent performance with it. I am using the two ISO's with Hyper-V integration Kernel pre-configured (2.0.3 and 2.1 from the previous page). I have FIOS (measures 24.8mb/s down and 4.87mb/s up on speedtest.net with traffic shaping turned off) and tried the 2.0.3 release and the HFSC produces errors during the wizard with the rules. I tried it with the 2.1Beta release and the HFSC creates the rules properly, however i cannot get any webpages to load unless i decrease my download to less than 8mb/s.

I can confirm that traffic shaping works correctly in 2.1Beta. I tried everything i could to get the rules to work correctly in 2.0.3, but I could not get them to load without erroring. The speed limitation in 2.1 was due to no seting the LAN bandwith corrrectly. (I had it matched to the qInternet (download bandwidth) and that was split between the qLink and qInternet subsets and therefore limiting me. I am now getting 24.87megabits per second downloads.

I then tried PRIQ method and the wizard completes fine, however the speed (measured by speedtest.net) is limited around 8.8mb/s on download.

I was able to get the HSFC method working with 2.1 by adding a additional LAN rule for each que. See the following link:
http://www.hammerweb.com/blog/2011/09/traffic-shaper-in-pfsense-2-0/

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

**Thanks again to everyone who has posted solutions and fixes for running pfsense in hyper-v. It's a great solution. I'm looking forward to moving beyond the 2.1Beta as 2.1 seems very promising with IPv6 support becoming mainstream in the near future…

P.S. It does say that there is an update available...PollyPy any thoughts on releasing an updated version of 2.1?

EDIT: the calc run error appears to come back after reboot despite the above command in the sysctl.conf file, but it does work when run directly in shell. Any ideas to make this persistant?**

PollyPy

@nlitend1:

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

add into "System: Advanced: System Tunables" new value

Save and reboot

nlitend1

@PollyPy:

@nlitend1:

I am truly loving pfsense at this point. Other than the calc run time error (I used "sysctl kern.timecounter.hardware=TSC" to fix it. You can run it until next reboot by typing the quoted text into shell first…Then add "kern.timecounter.hardware=TSC" to /etc/sysctl.conf via the "edit file" method under the Diagnostics menu. (speaking of that method....it reminded me that the interfaces of the hyper-v adapters (hn0 and hn1) don't show up until you add "hn" to the list of altq enabled adapters in /etc/inc/interfaces.inc (just search for "altq" in that file and add it to the list))

add into "System: Advanced: System Tunables" new value

Save and reboot

Thanks! Worked perfectly. Any plans on releasing a "hyper-V edition" of the latest release?

PollyPy

Ok. Here's my last ISO with a Hyper-V kernel

http://goo.gl/Ja36D :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-20130516-0018.iso

and my last Update source for pfSense-LiveCD-2.1 with a Hyper-V kernel

http://goo.gl/dEFjv :: latest1.tgz (2.1-RC0 (amd64) built on Thu May 23 20:43:32 EDT 2013)

Prosysaps

About to test the 2.0.3 with hyper-v kernel, can't get any VLAN capable interfaces with synthetic drivers, has anyone got this working? Im on a 2012 Hyper-V

nlitend1

@PollyPy:

Ok. Here's my last ISO with a Hyper-V kernel

http://goo.gl/Ja36D :: pfSense-LiveCD-2.1-DEVELOPMENT-amd64-20130516-0018.iso

and my last Update source for pfSense-LiveCD-2.1 with a Hyper-V kernel

http://goo.gl/dEFjv :: latest1.tgz (2.1-RC0 (amd64) built on Thu May 23 20:43:32 EDT 2013)

Is the update source the file that can be used to do an inplace update without breaking things? i.e., i'm on 2.1 BETA 1 released April 30th. (your hyper-v release on the previous page) Can i just use the update source to do an in place manual upgrade?

stiggle

@hege:

Hi,

look for the string "sleeping thread" in your error log,
if you can find it, you can try this: (helped me a lot)

System / Advanced / Admin Access
Change Max Processes from 2 to 1

System / Advanced / System Tunables
Change vfs.read_max from default to 64 or 128 (not higher)

Reboot !

Please let me know if it helped you too.

Ps: i hope you are using the image from PollyPy

Sorry for taking a while to get back…
I've got "sleeping thread" - made the changes, still got crashes :-(

hege

@Prosysaps:

About to test the 2.0.3 with hyper-v kernel, can't get any VLAN capable interfaces with synthetic drivers, has anyone got this working? Im on a 2012 Hyper-V

do you mean the pfsense vlan settings?
You can (should) use the hyper-v vlan settings, which you can change with the hyper-v manager.

HyperVVlanSettings.jpg_thumb

stiggle

Good news is this VM (in Hyper-V 2012) is now staying up for a few hours.
Bad new is its still making crash dumps :-(
Panic String: bpf_copy

stroyerdk

I can force craches when having an internal webserver and with DNS Reflection enabled on the virtual pfSense.

Refreshing the website 2-3 times in a row causes a kernel panic and a reboot.

I have taken down, and replaced the virtual pfSense for now, as this is not optimal :-)

/Kind regards

hege

Hi,

anyone with a working CARP setup?

i tried now for hours, but no luck,
it seems that the same problem with the "de" driver still exists with the "hn" driver…

i get the "fa_add_loopback_route: insertion failed" message and carp stuck at init

more info here:
http://forum.pfsense.org/index.php?topic=44550.0
http://forum.pfsense.org/index.php?topic=44529.0

Dennis Westhuis

Same problem here :-\

Even after enable Mac spoofing….

This is a big showstopper for us!

draculea

@hege:

@Fehler20:

I've tested the PRERELEASE ISO and found some things which are not working:

Traffic Sharping (no interfaces shown)

To help others to waste too much time (as I did), you can simple enable Traffic shapping with an edit in a file.

In the shell, open /etc/inc/interfaces.inc and search for "altq".
There should be an array where you just have to add the entry "hn".
After saving traffic shapping should work immediately.

@zootie thank for your great work, i test your image since jan and for me it is nearly perfect :)

Sorry for my bad english :)

Hello all,

i have successfully deployed the latest image to Hyper-v and after a few days of tests i decided to use it in my home router until in becomes RC or final.

All works well apparently except the traffic shaping. I have seen the post i quoted but i am completely new to this and i have not managed to make the necessary changes.

Pretty please, could someone guide me in detail how to manage to work out the wizard error?

Regards

hege

Navigate to shell (from the pfsense menu - menukey 8 i think)

vi /etc/inc/interfaces.inc

Esc + ?altq - return
(Esc + ? is the searchfunction from vi - editor, and we search for the string "altq")

navigate to the array, which you can see in the attached image,
type Esc + i (now you can write)

add the string "hn", to the array, after that save your changes with Esc + :wq - return

If you have problems with the vi editor - here you can find a good reference http://www.lagmonster.org/docs/vi.html

Interfacechanges.jpg_thumb