VMs behind my OPNsense router were stuck at 2 Gbps on a 5 Gbps fiber line. Two host-side fixes, GRO and virtio multiqueue, doubled routed throughput.