Netgate Store

Author Topic: Icmp dropped on KVM/Qemu - pfsense 2.4.2 (amd64)  (Read 231 times)

0 Members and 1 Guest are viewing this topic.

Offline pakito

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Icmp dropped on KVM/Qemu - pfsense 2.4.2 (amd64)
« on: November 29, 2017, 05:39:26 am »

my hypervisor (Debian 9.2) has 2 NIC Broadcom
I had put those NIC in brige 0 and 1

my vm has 2 virtio interface bridged to hoster
the first interface has static ipv4 address (WAN)
the second use a Vlan (LAN)

The traffic is natted by Wan nic.

When I send rapidely 1000 icmp packets to internet, I loose ~ 4 - 6 packets.
I dont have errors on interface.
When I sniff from hypervisor, I saw icmp packet enter to vnet nic but I dont see outgoing on other vnet.
I can saw the state from incoming but I dont saw the outgoing state like others ping.
the state table is not full
Disable hardware checksum offload is checked
Disable hardware TCP segmentation offload  is checked
Disable hardware large receive offload  is checked

I can reproduce this problem with pfsense 2.3.1 to 2.4.2, with em1000 or virtio interface

Does anybody can help me ?
I've been pulling my hair for two days