Continuing on, it looks like when SR-IOV is removed I'm getting much better performance, although I will need to continue tuning this more to get where I want. It's unfortunate that #pfsense #SRIOV still seems completely broken - this has been reported for a very long time.

Oh, and if #pfSense wasn't enough...I also have #Fortigate #VM running on #OpenShift as well (for 25G #SRIOV #Intel interfaces). Best part is they do bootstrap configuration and auto-licensing! What can I say...#openshiftvirtualization...just works! 😇