pfSense Support Subscription

Author Topic: IMPORTANT: Xen/KVM networking will not work using default hypervisor settings!  (Read 38436 times)

0 Members and 1 Guest are viewing this topic.

Offline webdawg

  • Full Member
  • ***
  • Posts: 114
  • Karma: +3/-1
    • View Profile
Anyone know how to make a wiki account we should get some xen keywords in some of these wiki posts.

Offline ednc

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Quote
It actually does:

https://doc.pfsense.org/index.php/VirtIO_Driver_Support
https://doc.pfsense.org/index.php/Lost_Traffic_/_Packets_Disappear
https://doc.pfsense.org/index.php/Virtualizing_pfSense_on_Proxmox

Thanks for pointing these out. I was looking for the specific Xen/KVM page on the Wiki. The "Lost Traffic" page is not in the Virtualisation category so I have never even seen that. Proxmox is not what I'm using and it has no mention of ethtool etc. As to VirtIO page, I never got around to that as it never downed on me that that's the root of my issue. I'm not complaining, just pointing out that having a separate Xen/KVM page on the Wiki could be beneficial.

Offline johnkeates

  • Hero Member
  • *****
  • Posts: 633
  • Karma: +50/-1
    • View Profile
Quote
It actually does:

https://doc.pfsense.org/index.php/VirtIO_Driver_Support
https://doc.pfsense.org/index.php/Lost_Traffic_/_Packets_Disappear
https://doc.pfsense.org/index.php/Virtualizing_pfSense_on_Proxmox

Thanks for pointing these out. I was looking for the specific Xen/KVM page on the Wiki. The "Lost Traffic" page is not in the Virtualisation category so I have never even seen that. Proxmox is not what I'm using and it has no mention of ethtool etc. As to VirtIO page, I never got around to that as it never downed on me that that's the root of my issue. I'm not complaining, just pointing out that having a separate Xen/KVM page on the Wiki could be beneficial.

Yeah, someone with Wiki access should probably add Xen-specific keywords in there.

Offline fohdeesha

  • Jr. Member
  • **
  • Posts: 63
  • Karma: +13/-1
    • View Profile
those pages also incorrectly advise (at least incorrect for xen) to disable checksum offloading IN pfsense - which does nothing and sometimes makes performance worse. it must be done at the hypervisor level. I'd be willing to nicely format this complete xen guide into a wiki page/guide for Xen/Xenserver specifically if I had wiki permissions - https://forum.pfsense.org/index.php?topic=109253.msg608562#msg608562

also why is this even still necessary? Wasn't this fixed upstream in freebsd like 2 major versions ago? I swore the 2.4 snapshots used this version and this wasn't required, or maybe my memory is broken (quite possible)

Offline johnkeates

  • Hero Member
  • *****
  • Posts: 633
  • Karma: +50/-1
    • View Profile
those pages also incorrectly advise (at least incorrect for xen) to disable checksum offloading IN pfsense - which does nothing and sometimes makes performance worse. it must be done at the hypervisor level. I'd be willing to nicely format this complete xen guide into a wiki page/guide for Xen/Xenserver specifically if I had wiki permissions - https://forum.pfsense.org/index.php?topic=109253.msg608562#msg608562

also why is this even still necessary? Wasn't this fixed upstream in freebsd like 2 major versions ago? I swore the 2.4 snapshots used this version and this wasn't required, or maybe my memory is broken (quite possible)

Nope, VirtIO + pf is still broken afaik in FreeBSD.