You can do that, forward requests to the correct server based on the host-header, using Reverse Squid or HAProxy. HAProxy is more capable but potentially more complex: https://doc.pfsense.org/index.php/Haproxy_package Steve

Hi everybody, Someone have an idea to solve this problem? Thanks in advance Jack

It sounds like you have some sort of asymmetric route happening. You may be seeing an ICMP redirect that allows the traffic to pass until it times out. You need to trace where that syn/ack from the timeclock is going or if the syn ever reaches it. The first thing I would do though is check the pfSense firewall logs for blocked flagged or outbound traffic. Steve

Fixed.  Browser issue.

I'd start your toubleshooting with the  NICs: https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards Try searching the forum for your specific NIC or chipset

@dvs23: Well, buying a managed switch is no problem, I just cannot add a second wire to the APs… So I thought it would be unnecessary.. A VLAN to an access point is the usual method for multiple SSIDs.  A common configuration is to have the native LAN used for normal users and the VLAN for guests, who are only allowed to access the Internet.

OK, so how do we know that the Link Down/Up event was not a genuine event on the port?

I've applied this fix to my Atom N3150 box with 2 x Realtek NICs. Before, when I would push a lot of traffic (600+ mbps) through the system, either the LAN or WAN interface (or both) would crash. None of the fixes I found on the internet including disabling hardware checksum / hardware offloading under Advanced fixed this. But I'm happy to report that once I installed this driver, I can push a ton of traffic through the system without too much trouble!

@aGeekHere: just tested it again, it no longer works, oh well. I`d try it too - no effect ((( No ideas more? (

Ah, I see. Thanks for the info.

in windows open cmd as administrator and type netstat -ab. Also check this out https://forum.pfsense.org/index.php?topic=33833.0

Turn up another inside interface that doesn't use squid/squidguard and test again.

Posted a reaction about natting on ipsec in that other thread.. Its not the same as for regular interfaces.

Have you tried either of those devices? What was the result? That list is by no means complete, it's only what people have confirmed as working. Steve

It still might be a problem with your radios and the number of simultaneous associations they can handle. Router or bridge mode shouldn't matter that much.