performance drop on high bandwidth capacity links

adrian-ilarion ciobanu <[email protected]> Thu, 27 Nov 2025 08:53:27 +0200
Newsgroups gmane.os.freebsd.devel.ipfw
Message-ID <CAMOmXsBWXg7CVF+dZkta9+w3VU7TCPoejwe6s0-Bc1xiKvQGHg@mail.gmail.com>
test framework:
hyper-v  freebsd vm 14.3-RELEASE-p5
hyper-v linux vm

test 1:
- ipfw kmod unloaded
- iperf3 receiver on freebsd vm
- iperf3 client: any other vm connected to the same hyper-v switch or the
windows 11 host itself

[  5]   0.00-10.00  sec  22.1 GBytes  19.0 Gbits/sec    0            sender
[  5]   0.00-10.00  sec  22.1 GBytes  19.0 Gbits/sec
 receiver

test 2:
same conditions but with ipfw loaded, no other rules but default to accept:

[  5]   0.00-10.00  sec  7.58 GBytes  6.51 Gbits/sec    0            sender
[  5]   0.00-10.00  sec  7.57 GBytes  6.50 Gbits/sec
 receiver



i ran the same (ipv4) iperf3 test  against a linux vm under the same
conditions, with and without nftables. i got no (significant) performance
drop, even with a stateful firewall.

everything is default-configured, no special configurations were applied to
any (sub)systems.
there is no packet loss, no retries.

is this normal?

thank you,
adrian