Low throughput DMZ <-> Internal unraid server

[beepmeep]

Hello

 

This issue reappeared after upgrading to Unraid 6.8.3 (from 6.7.2).

I remember solving this issue before when I made the installation, but it's a year ago and now I'm at a loss.

 

My Unraid NIC is connected to a switch running tagged VLAN 2 (172.16.0.0/24) and untagged vlan 5 (10.96.0.0/24).

 

I have a VM connected to my DMZ (VLAN2) and want to use NFS to my Unraid server (VLAN5).

Firewall (also virtualized in unraid with NIC passthrough) is allowing all connections for testing purposes.

 

When I test throughput (iperf) from my DMZ VM to my Unraid server, the result is the following:

 

[  4] local 172.16.0.20 port 44942 connected to 10.96.0.55 port 5201
[ ID] Interval           Transfer     Bandwidth       Retr  Cwnd
[  4]   0.00-1.00   sec   205 KBytes  1.68 Mbits/sec    2   1.41 KBytes
[  4]   1.00-2.00   sec  0.00 Bytes  0.00 bits/sec    1   1.41 KBytes
[  4]   2.00-3.00   sec  0.00 Bytes  0.00 bits/sec    0   1.41 KBytes
[  4]   3.00-4.00   sec  0.00 Bytes  0.00 bits/sec    1   1.41 KBytes
[  4]   4.00-5.00   sec  0.00 Bytes  0.00 bits/sec    0   1.41 KBytes
[  4]   5.00-6.00   sec  0.00 Bytes  0.00 bits/sec    0   1.41 KBytes
[  4]   6.00-7.00   sec  0.00 Bytes  0.00 bits/sec    1   1.41 KBytes
[  4]   7.00-8.00   sec  0.00 Bytes  0.00 bits/sec    0   1.41 KBytes
[  4]   8.00-9.00   sec  0.00 Bytes  0.00 bits/sec    0   1.41 KBytes
[  4]   9.00-10.00  sec  0.00 Bytes  0.00 bits/sec    0   1.41 KBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth       Retr
[  4]   0.00-10.00  sec   205 KBytes   168 Kbits/sec    5             sender
[  4]   0.00-10.00  sec  65.0 KBytes  53.3 Kbits/sec                  receiver
 

 

If I run the same test to a physical machine in the internal vlan (VLAN5), I get 1Gbit throughput.

If I assign an IP address to my VLAN2 interface on my Unraid box, I get ~~25gbit (internal speeds).

 

Assigning an IP address to VLAN2 would be a workaround, but I don't like the security - are there any ways to limit the ports opened by Unraid on a specific IP? I've figured out how to bind the web interface & ssh to internal IP, but I still see open ports;

 

Starting Nmap 7.60 ( https://nmap.org ) at 2021-01-18 10:26 CET
Nmap scan report for 172.16.0.10
Host is up (0.00012s latency).
Not shown: 991 closed ports
PORT      STATE SERVICE
21/tcp    open  ftp
111/tcp   open  rpcbind
139/tcp   open  netbios-ssn
445/tcp   open  microsoft-ds
2049/tcp  open  nfs
5900/tcp  open  vnc
5901/tcp  open  vnc-1
5902/tcp  open  vnc-2
32768/tcp open  filenet-tms
MAC Address: 40:B0:76:DA:35:F7 (Unknown)

Nmap done: 1 IP address (1 host up) scanned in 1.62 seconds
 

Any ideas?

[beepmeep]

Funny enough, I now see that I asked something similar a year ago when I did the installation, but it's with a nice drawing, so heres the link for additional details on the setup: