Hello

Today I have this configuration on three sites :

2 proxmox VE server on site 1 and 2 with M720Q i5-8400T, 32 Go RAM with a LXC Wireguard on a specific VLAN (tagged) with this network config

For site 1 : VLAN 10 LAN, VLAN 11 DMZ, VLAN 12 COREVPN
For site 2 : VLAN 50 LAN, VLAN 51 DMZ, VLAN 52 COREVPN
For site 3 : 1 R220 with 32 Go RAM, VLAN 1 LAN, VLAN2 DMZ, VLAN3 COREVPN, VLAN4 VPNMOBILITY with a pfSense Firewall

A site-to-site vpn is up between each sites

I reach around 600 Mbit/s symetric on VPN on each sites, but the 2, 3 first days only, after we have signifiant slow down between link between site 1 and 2 (two LXC)

I already tried to restart wireguard only on LXCs but nothing, I already tried to flush iptables and leave full open, nothing too. The only solution I was found is to planify a reboot each 3 days on LXC only.

We never rebooted and have any issue with pfSense Firewall KVM with mobiles clients VPN (iPhone, windows, etc) and between pfSense and LXC sometimes we have slow down, reboot LXC only solve problem too

Do you think it is better to switch to a KVM Virtual Machine instead of LXC ? Or maybe a bad setting on LXC

Do you think it is better to switch to a KVM Virtual Machine instead of LXC ?

1 point

Lower your MTU to 1380 and try again.

permalink
report
reply
1 point

Hello Already tried

permalink
report
parent
reply

Homelab

!homelab@selfhosted.forum

Create post

Rules

  • Be Civil.
  • Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
  • No memes or potato images.
  • We love detailed homelab builds, especially network diagrams!
  • Report any posts that you feel should be brought to our attention.
  • Please no shitposting or blogspam.
  • No Referral Linking.
  • Keep piracy discussion off of this community

Community stats

  • 10

    Monthly active users

  • 1.4K

    Posts

  • 6K

    Comments