pfSense 2.5.2 periodic HUGE lag spikes

muenchris

@abtekk interesting. I thought the traffic shaper will limit connections from a client to one WLAN gateway (like a smart-queue in Unifi).
With my 4 WLANs I can download Steam or XBox updates across all WLANs, will this still work after the shaper is active?

abtekk

@muenchris Yes, in fact you won't be shaping your download speed at all, you just still need the rule to make the firewall happy. The only thing you'll be shaping is your upload speed (by up to 20%), which is just to stop the overload that seems to cause this. Let me know how you get on.

muenchris

@abtekk Thanks, I will try and test for a couple of days then let you know

muenchris

@abtekk Quick question: I did not select any of my interfaces in the firewall rule. Do I have to select all interfaces that I use in my load-balancer gateway group or keep them all unselected?

SteveITS

@muenchris said in pfSense 2.5.2 periodic HUGE lag spikes:

If I reboot the 6100 I do not see any lag for a day or so

A day seems fast for my suggestion but check to see if it's running out of memory. pcscd has a memory leak.

OTOH if the Internet pipe is full then that will back up everything and traffic shaping can help that a lot.

muenchris

@steveits My network setup is quite complicated. Behind the pfSense/6100 there is a Unifi UDM Pro that manages my main network that has 5 sub-networks (IoT, Cameras, Media, Gaming and Business). All firewall rules are managed by the UDM Pro - the pfSense is "only" load balancing. This results in my triple-NAT setup.
Also my WLANs are all LTE router with non-consistent internet speeds (very different for time of day and day of week).
Especially the (isolated) IoT network creates a lot of "mini-Connections" to their respective clouds.
If there is a memory leak in one of the pfSense services it might be caused by the IoT network (over 150 devices).

Is there something (like a specific service) I can "flush/restart" periodically? I would have to restart the complete Netgate every night

MagikMark

@abtekk

According to this thread:

https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4

Codel has a bug. Use "taildrop" instead. You'll get same result

abtekk

@magikmark Thanks, I will check it out.

SteveITS

@muenchris said in pfSense 2.5.2 periodic HUGE lag spikes:

something (like a specific service) I can "flush/restart" periodically

The pcscd service, as mentioned :) If you aren't using IPSec you can just stop it, though it will start when pfSense boots. Otherwise if you follow into that bug report there is a patch to disable it properly. Not saying this is your issue, but it's generally an issue on all installs eventually.