I have experienced the exact same. Including when updating the game as well. I've noticed that when I run an update, for the inital 15ish minutes it will run at my regular speed, then it will drop down to 10mbps. If I pause and resume the download, then it will resume back to the normal speed. Pausing/unpausing has saved me a ton of time for large updates. Strange behavior overall. Unfortunately I am locked with my xfinity router at the moment, so I can't do much additional investigation/tweaking.

@Gblenn gaming systems did not have voice chat without STUN enabled

So your being DDoS’d?

There isn't much you can do about that on consumer hardware.

We get DDoS’d all the time at work, and we have special appliances that use algorithms to intercept that kind of traffic and absorb it before it hits our production hardware.

@KOM I can see that WAN is blocking that port. How to set up the rule for WAN to let it pass?

This should be fixed in 24.08, its actually an issue with miniupnpd from what i understand, and they have fixed it. Its fixed in the latest dev version of pfsense because they updated the packages,

If you want states to time out like they should, then you will need to manually update the package on your pfsense box.

run the update pfense to get the latest repos, and then run

pkg upgrade miniupnpd

from shell. this will update miniupnpd to the latest version, and should fix the states never timing out problem.

I would also restart the miniupnpd service just to make sure you are using the updated package if you take this route.

If not, it should be fixed in the future release.

I was making changes and said wait a second let’s check the status page

When we use the Xbox they disappear after it’s done with the games. The states don’t close?

Could you share the steps you took to fix UPnP issues with games such as Planetary Annihilation and Call of Duty, even after trying various configurations repeatedly? Did you also face any challenges related to webcam settings during this troubleshooting process?

@xtreamdev what is the bottom part of UPnp Settings? You can add in specific IP addressing have you enabled that? Did you also set NAT up correctly? Static port I think the setting is for the Xbox only.

https://docs.netgate.com/pfsense/en/latest/recipes/games.html

@DynamiteLotus I have always been using UPnP and have Open NAT on all my games.

But it seems to me that one key element to the success here is to change the default port 3074 so that each Xbox uses a different port.. So this is not a pfsense setting or rule, it's something you have to do in each Xbox manually.

I don't know anything about Xbox but it's in the guide that is linked in the original post.

800502fe-6800-48f8-9772-bd7e18181517-image.png

https://forum.netduma.com/topic/21835-the-new-xbox-one-update-has-manual-port-selection-3074-more/

UPDATE: Turns out it was an issue with my ISP. However, I'm still wondering why my memory usage was so high (it's far lower now after a system reboot).

@Sabrcyclon Great that it's working with that setup. If you ever get the urge to do more testing, you can always try to recreate that deny rule and see if it breaks things. Then you can try limiting the ports as well, but testing takes time so question is, is it worth it... ?

9 years later! Wonder how many had this issue in that time.

To save someone else hours of pulling their hair out....

Don't forget to reset state tables!!!

Diagnostics / States / Reset States

Rebooting the router / PC / Game did not work!

Resetting state tables may take a while and not automatically refresh the page. Click on the pfsense logo and wait for the home page to load.

@JonathanLee I block DNS over HTTPS to the firewall using unbound because I have unbound running DoT. My solution to the Nintendo griping about DNS was to route it out to 1.0.0.2. I was also having issues with unbound using the ephemeral ports I was using, interrupting my sensitive codel games so had change localhost's NAT outbound.