Subcategories

  • Discussions and feedback related to this forum

    607 Topics
    3k Posts
    johnpozJ

    @microserfs and what IP was that - clearly your current IPv6 address is not block that I show you connected with.. And the only other IPv4 I see you using is not blocked.. You would have to let me know what IP you were coming from that was blocked.. Send it to me via PM if you don't want to make it public.

  • Community Hiring and For Hire postings related to jobs that require pfSense software skills

    27 Topics
    114 Posts
    w0wW

    @sef1414
    Name it "run.sh", copy to pf and chmod according documentation
    https://docs.netgate.com/pfsense/en/latest/development/boot-commands.html#shell-script-option
    You will see messages in the system log like those quoted in the script after logger command.

  • Youtube has spiky downloads!

    4
    0 Votes
    4 Posts
    1k Views
    H

    To give a general explanation of this.

    TCP defines a window as how many segments are in-flight Most TCP algorithms use packet loss as an indicator to back off Buffer bloat means hundreds of milliseconds of data can be buffered and trickled in to you

    Now imagine this. Your bloated buffers can hold 500KiB of data. Netflix wants to send you an average of 5Mb/s in 250KiB chunks while reusing TCP connections. If Netflix sends you 250KiB of data at 10Gb/s, while you can't receive it that fast, you cable/DSL modem's buffer holds all of the data. Since no packets are dropped, Netflix never knows to back off. Since all of the data fits within the TCP window, and the bloated buffer can hold the entire window, you will get line-rate bursts.

    This is why bufferbloat is bad.

    I had a variation of this. My ISP has an elastic buffer that allows bursts through. Instead of the buffer soaking the burst and slowly trickling it through, it let the burst pass, then started to clamp down. This meant my computer will receive the data at full 1Gb/s even though, at the time, I had a 100Mb connection. My computer would ACK all of the data, making the send think I actually have a 1Gb connection. As they continued to send 1Gb/s at me, my ISP's shaping algorithm would start to restrict the bandwidth and started to drop packets. This would cause a burst of packet-loss at the start of any heavy low-latency TCP connection.

    I actually fixed this by having PFSense shape my downloads. Instead of just telling the 1Gb burst through, PFSense would buffer it and start dropping some packets prior to my ISP doing so. This did two things. 1) It delayed the packets 2) It dropped fewer packets early on before the sender ramped up to full speed.

  • Plz confirm if TFTP is working OOB 2.3.2-RELEASE-p1

    1
    0 Votes
    1 Posts
    569 Views
    No one has replied
  • Floating rules and outbound routing

    2
    0 Votes
    2 Posts
    708 Views
    H

    https://forum.pfsense.org/index.php?topic=78480.msg428354#msg428354

  • PFSense needs a rebase

    3
    0 Votes
    3 Posts
    2k Views
    dennypageD

    I can't believe it was release on github. Was the no cvs server available to use?

  • External Mysql intigration with pfsense 2.3.2 freeradius package

    2
    0 Votes
    2 Posts
    981 Views
    T

    Yes, I would love that to. Especially how to use max upload/download bandwith limits per user.

    Did you find a working solutions?

  • MOVED: ***Hiring***Network Tech in San Francisco

    Locked
    1
    0 Votes
    1 Posts
    664 Views
    No one has replied
  • Chrony

    5
    0 Votes
    5 Posts
    3k Views
    dennypageD

    Overall, Chrony is actually quite nice. Shame about the license.

  • Attention: Expert Help Needed! Serious Bufferbloat

    4
    0 Votes
    4 Posts
    1k Views
    W

    @Harvy66:

    Just a quick fix, just enabled Codel shaping on your WAN and LAN interfaces and set your bandwidth to 90% of your actual bandwidth.

    +1

  • 2º disk

    1
    0 Votes
    1 Posts
    1k Views
    No one has replied
  • OPT1 no internet access

    13
    0 Votes
    13 Posts
    4k Views
    N

    Hey john, you make me laugh :)

    I have been there this weekend and what I could find was not the best :/
    situation:

    WAN -> WAN

    OPT1 -> (direct line)PoE switch -> several ProCurve M5M310 AP and Linksys (was installed years ago by a company) (IP 192.168.2.xxx)

    LAN -> simple (dumb) switch, from here it goes 4 ways: (IP 192.168.0.xxx)

    1: phone box (currently disabled)
    2: to reception -> dumb switch -> computers, printers.
    3: to office -> dumb switch -> printers, computers
    4: camera

    the ISP is even more horrible then i thought, they got a DSL line that has a maximum of 28Mbps and if we are lucky we get 6Mbps at night.
    I have told them to change this ASAP this month, and going to change this to a 125Mbps line to start with.

  • It takes 15 minutes to start

    2
    0 Votes
    2 Posts
    1k Views
    K

  • The Router Rumble

    14
    0 Votes
    14 Posts
    4k Views
    H

    I myself prefer meritocratic forums. Not a huge fan of democratic, everyone's opinion matters, everyone gets a trophy forums. But I do frequent support forums where the target audience are the general public and need help.

  • Captive portal using a facebook accout for free wifi

    2
    0 Votes
    2 Posts
    2k Views
    W

    Hi, i like your captive portal design, I am setting up one for elementary school I was wondering if you are will to share the code.

    thank you!

  • Https blocking

    2
    0 Votes
    2 Posts
    901 Views
    KOMK

    This forum is for General Discussion.  if you need technical support, try the Support forums, specifically the Cache/Proxy forum.

  • RRD Graphs: Quality

    3
    0 Votes
    3 Posts
    1k Views
    H

    Don't rule out that the gateway itself just doesn't like responding to pings. While highly correlated, some hardware accelerated devices can forward packets fine, but actually responding to pings requires the severely limited host CPU to do work.

  • Internet upgrade

    14
    0 Votes
    14 Posts
    3k Views
    L

    You could always look for 2Gb fiber from Comcast, but for $300/mo.

  • Gold@pfsense.org [user unknown]

    5
    0 Votes
    5 Posts
    1k Views
    P

    ;)

  • Upcoming versions

    2
    0 Votes
    2 Posts
    922 Views
    H

    Pretty much answered here

    https://forum.pfsense.org/index.php?topic=117943.msg653538#msg653538

    FreeBSD 11 is making things crazy

  • PFSENSE TROUBLE

    6
    0 Votes
    6 Posts
    2k Views
    johnpozJ

    So you answered this thread a year later??  Kind of pointless…

  • Pfsense blocks traffic on and off

    4
    0 Votes
    4 Posts
    1k Views
    KOMK

    am wondering of there is any one trying to help otherwise am still waiting

    Perhaps you should post your problems in the pfSense English Support section, and not General Discussion.

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.