How to install jails without severely degrading 10G performance?

[Nik]

Hi all,

No matter how I install jails, without massively affecting the 10G performance? I tried vnet if with and without berkeley, bridge if, or directly attached to ix1 if to assign it to the jail (resilio). Vnet without berkeley filter does not work.

Performance goes down from 9.28Gb to 1.8Gb (measured with iperf).

Only if I delete all jails on both my Freenas performance is back to normal.

I guess it's because jails seem to force the interfaces into promiscuous mode. But can I avoid that? Is it needed?

Looking forward to some advice.

Regards,
Nik

 

[dlavigne]

Were you able to figure out where the bottleneck exists?

 

[Nik]

No, I didn't. Only option is to remove jails.

 

[Nik]

What's the recommendation from an IX engineering perspective? Using VNET?