The problem I'm having is that I have a 500 mbps fiber line and it seems iptables is the bottleneck on my Linux workstation router (~200 mbps) when doing network address translations (NAT). Doing a speed test directly on the WAN VLAN
gets me the full 500 mbps (more about the config below).
The workstation has a guest Virtualbox Linux machine that is NATing a LAN VLAN
to the WAN VLAN
on my Dell Enterprise S3048-ON switch. The host OS is Windows 10. By the way, it's using two logical interfaces but only using on physical port on the switch.
The specs on the workstation is a 16-core 1950X, 128GB RAM with an Intel I211-AT Gigabit LAN controller.
Also, I'm not sure if this matters for performance or not but for whatever reason VLAN tags get stripped before it gets to the Linux VM guest OS. To make it work I have to go to the Win10 device manager and create virtual interfaces that are assigned to the WAN VLAN
and LAN VLAN
then the Linux guest VM sees them as regular untagged ports and the Linux VM NATs between them.
Does the guest not having access to native VLANs create my performance issue?
Or do I simply have to upgrade to a better NIC perhaps? I'm not sure hardware recommendations are allowed here so what will I have to look for in a NIC if that's the case?
I've tried to look for answers but there's very little on this topic. If someone could provide more information to help me figure this out I'd be really thankful.