FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
GiannisChari
Staff
Staff
Article Id 375134
Description This article provides a solution to a case of slow download speed on clients behind a FortiGate VM that is running on ProxMox VE (Virtual Environment) with Broadcom BCM57502 NICs.
Scope FortiGate, ProxMox.
Solution

Some Dedicated Servers equipped with Broadcom BCM57502 NICs may experience really slow download speeds inside VMs or containers running on Proxmox VE (Virtual Environment). To resolve this the generic-receive-offload on the actual interface of the server, where Proxmox bridges, must be disabled

 

How to disable and make the change permanent:

 

SSH to the server and list all PCI devices with this command:

 

lspci -nnd ::200

 

For example:

 

lspci.png

 

If the PCI ID is [14e4:1752], the server is affected.

 

List the network interfaces with:

 

ip -brief link show

 

For example:

 

interfaces.png

 

To find which interface corresponds to the Broadcom controller, run the following:

 

ethtool -i eno1

 

For example:

 

bbddcc.png

 

Now that the interface is identified, the 'generic-receive-offload' parameter needs to be disabled.

To check if 'generic-receive-offload' is enabled and disable it, use these commands:

 

ethtool --show-offload eno1 | grep generic-receive-offload

ethtool --offload eno1 generic-receive-offload off

 

off.png

 

Finally, to make the change permanent, the /etc/network/interfaces file needs to be modified and the network service needs a restart:

 

interfaces_2.png

 

Service restart:

 

restart_s.png