Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Apr 2022 20:07:43 -0400
From:      Matt Garber <matt.garber@gmail.com>
To:        mike tancsa <mike@sentex.net>
Cc:        FreeBSD-STABLE Mailing List <freebsd-stable@freebsd.org>
Subject:   Re: vtnet rxcsum broken for forwarding RELENG_13 ?
Message-ID:  <CANwXMPPUEYWOoYLcYGhzMpP=MOd-oNrT4S7NJUy8AE52cPRvEg@mail.gmail.com>
In-Reply-To: <d30a54ad-6b93-456e-64fc-75d1b09b2fb3@sentex.net>
References:  <d30a54ad-6b93-456e-64fc-75d1b09b2fb3@sentex.net>

next in thread | previous in thread | raw e-mail | index | archive | help
--00000000000036f02005dc69daf8
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 11, 2022 at 7:15 PM mike tancsa <mike@sentex.net> wrote:

> I was setting up a VM pf firewall and noticed I was not able to nat out
> for some reason. Looking at the pcap, it seems when the vm is in
> forwarding mode, I get tcp checksum errors. If I do a
>
> ifconfig vtnet1 -rxcsum
>
> ifconfig vtnet0 -rxcsum
>
> nat then seems to work fine
>
> The setup is a simple VM with the hypervisor libvirt/KVM ubuntu 20 LTS.
> Guest is RELENG_13 from Apr 11/2022. If I change to em nics in the VM,
> all is fine out of the box.
>
>
> I opened up https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263229



Unless someone knows otherwise, I=E2=80=99ve been under the impression that=
 PF =E2=80=94 or
potentially any of the other FreeBSD firewalls (?), but I use PF =E2=80=94 =
has been
=E2=80=9Cbroken=E2=80=9D in that regard on Linux KVM-based FreeBSD guests f=
or years. As
such I=E2=80=99ve always needed to use csum_disable flags on the vtnet inte=
rfaces
or suffer *extremely* poor network performance, even for servers not doing
NAT forwarding.

E.g., see:

https://serverfault.com/questions/817664/slow-network-fixed-adding-hw-vtnet=
-csum-disable-1-what-are-the-posible-side-effe

https://forum.proxmox.com/threads/poor-virtio-network-performance-on-freebs=
d-guests.26289/



=E2=80=94Matt

<https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263229>;

--00000000000036f02005dc69daf8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div>On Mon, Apr 11, 2022 at 7:15 PM mike tancsa &lt;<a href=3D"mailto:mike=
@sentex.net">mike@sentex.net</a>&gt; wrote:<br></div><div><div class=3D"gma=
il_quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-le=
ft-color:rgb(204,204,204)" dir=3D"auto">I was setting up a VM pf firewall a=
nd noticed I was not able to nat out <br>
for some reason. Looking at the pcap, it seems when the vm is in <br>
forwarding mode, I get tcp checksum errors. If I do a<br>
<br>
ifconfig vtnet1 -rxcsum<br>
<br>
ifconfig vtnet0 -rxcsum<br>
<br>
nat then seems to work fine<br>
<br>
The setup is a simple VM with the hypervisor libvirt/KVM ubuntu 20 LTS.=C2=
=A0 <br>
Guest is RELENG_13 from Apr 11/2022. If I change to em nics in the VM, <br>
all is fine out of the box.<br>
<br><br>
I opened up <a href=3D"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D=
263229" rel=3D"noreferrer" target=3D"_blank">https://bugs.freebsd.org/bugzi=
lla/show_bug.cgi?id=3D263229</a></blockquote><div dir=3D"auto"><br></div><d=
iv dir=3D"auto"><br></div><div dir=3D"auto">Unless someone knows otherwise,=
 I=E2=80=99ve been under the impression that PF =E2=80=94 or potentially an=
y of the other FreeBSD firewalls (?), but I use PF =E2=80=94 has been =E2=
=80=9Cbroken=E2=80=9D in that regard on Linux KVM-based FreeBSD guests for =
years. As such I=E2=80=99ve always needed to use csum_disable flags on the =
vtnet interfaces or suffer *extremely* poor network performance, even for s=
ervers not doing NAT forwarding.</div><div dir=3D"auto"><br></div><div dir=
=3D"auto">E.g., see:<div dir=3D"auto"><br></div><div><a href=3D"https://ser=
verfault.com/questions/817664/slow-network-fixed-adding-hw-vtnet-csum-disab=
le-1-what-are-the-posible-side-effe">https://serverfault.com/questions/8176=
64/slow-network-fixed-adding-hw-vtnet-csum-disable-1-what-are-the-posible-s=
ide-effe</a></div><div dir=3D"auto"><br></div><div dir=3D"auto"><div><a hre=
f=3D"https://forum.proxmox.com/threads/poor-virtio-network-performance-on-f=
reebsd-guests.26289/">https://forum.proxmox.com/threads/poor-virtio-network=
-performance-on-freebsd-guests.26289/</a></div><br></div><div dir=3D"auto">=
<br></div><div dir=3D"auto"><br></div><div dir=3D"auto">=E2=80=94Matt</div>=
<div dir=3D"auto"><br></div></div><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;=
padding-left:1ex;border-left-color:rgb(204,204,204)" dir=3D"auto"><a href=
=3D"https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263229" rel=3D"nore=
ferrer" target=3D"_blank"></a></blockquote></div></div>

--00000000000036f02005dc69daf8--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CANwXMPPUEYWOoYLcYGhzMpP=MOd-oNrT4S7NJUy8AE52cPRvEg>