Our traffic appears be reflected back into our interface…



  • We run pfSense virtualized under KVM. On the linux side, the virtio veth interfaces connect to Linux bridges. Wed of last week, without restarting or changing any rules, we started seeing really strange behavior in our RRD graphs… it's almost like our traffic is getting reflected back into the interface. At the same point in time, our users started complaining about poor VOIP quality. Example graph attached.

    I don't know where to even start to get to the bottom of this. We've restarted all the hardware with no luck. We're seeing dropped monitoring ICMP pings on the gateways now as well. Any pointers much appreciated!

    EDIT, interface config on the Linux side:

    auto lan0
    iface lan0 inet static
    address 192.168.127.240
    netmask 255.255.255.0
    gateway 192.168.127.254
    post-up ip route add 192.168.125.0/24 via 192.168.127.125 dev lan0
    post-up ip route add 192.168.124.0/24 via 192.168.127.124 dev lan0
    post-up ip route add 192.168.123.0/24 via 192.168.127.123 dev lan0
    post-up ip route add 192.168.122.0/24 via 192.168.127.122 dev lan0
    post-up ip route add 192.168.121.0/24 via 192.168.127.121 dev lan0
    post-up ip route add 192.168.114.0/23 via 192.168.127.114 dev lan0
    post-up ip route add 192.168.112.0/23 via 192.168.127.112 dev lan0
    dns-nameservers 192.168.127.129
    bridge_ports bond0
    bridge_fd 0
    bridge_maxwait 0
    bridge_stp off

    auto wan0
    iface wan0 inet manual
    bridge_ports eth0
    bridge_fd 0
    bridge_maxwait 0

    auto wan1
    iface wan1 inet manual
    bridge_ports eth1
    bridge_fd 0
    bridge_maxwait 0

    auto sync0
    iface sync0 inet manual
    bridge_ports eth3
    bridge_fd 0
    bridge_maxwait 0



  • Edit: the pfsense forum board is giving me a 500 when I try to attach a picture: