Frequently, pfSense is used as a virtual firewall inside the VergeIO platform and the following are the best practices when creating and maintaining a pfSense virtual firewall VM.
- The disk and network interfaces should be set to VirtIO. Without having the NIC interface set to VirtIO (E1000 is the default) users may experience intermittent traffic stops.
- Inside pfSense, Hardware Checksum Offloading should be disabled for systems experiencing intermittent slowness or packet loss. Enabing the setting disables the virtual machine from relying on the NIC to process this, slowing down the VM considerably.
Need more Help? Email support@verge.io or call us at (855) 855-8300