• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

pfSense 2.5.2 periodic HUGE lag spikes

Scheduled Pinned Locked Moved General pfSense Questions
15 Posts 5 Posters 2.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A
    abtekk @muenchris
    last edited by Oct 28, 2021, 6:53 PM

    @muenchris Yes, in fact you won't be shaping your download speed at all, you just still need the rule to make the firewall happy. The only thing you'll be shaping is your upload speed (by up to 20%), which is just to stop the overload that seems to cause this. Let me know how you get on.

    M 2 Replies Last reply Oct 28, 2021, 6:59 PM Reply Quote 0
    • M
      muenchris @abtekk
      last edited by Oct 28, 2021, 6:59 PM

      @abtekk Thanks, I will try and test for a couple of days then let you know

      1 Reply Last reply Reply Quote 1
      • M
        muenchris @abtekk
        last edited by Oct 28, 2021, 7:40 PM

        @abtekk Quick question: I did not select any of my interfaces in the firewall rule. Do I have to select all interfaces that I use in my load-balancer gateway group or keep them all unselected?

        1 Reply Last reply Reply Quote 0
        • S
          SteveITS Galactic Empire @muenchris
          last edited by Oct 28, 2021, 7:59 PM

          @muenchris said in pfSense 2.5.2 periodic HUGE lag spikes:

          If I reboot the 6100 I do not see any lag for a day or so

          A day seems fast for my suggestion but check to see if it's running out of memory. pcscd has a memory leak.

          OTOH if the Internet pipe is full then that will back up everything and traffic shaping can help that a lot.

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote 👍 helpful posts!

          M 1 Reply Last reply Oct 28, 2021, 8:33 PM Reply Quote 0
          • M
            muenchris @SteveITS
            last edited by Oct 28, 2021, 8:33 PM

            @steveits My network setup is quite complicated. Behind the pfSense/6100 there is a Unifi UDM Pro that manages my main network that has 5 sub-networks (IoT, Cameras, Media, Gaming and Business). All firewall rules are managed by the UDM Pro - the pfSense is "only" load balancing. This results in my triple-NAT setup.
            Also my WLANs are all LTE router with non-consistent internet speeds (very different for time of day and day of week).
            Especially the (isolated) IoT network creates a lot of "mini-Connections" to their respective clouds.
            If there is a memory leak in one of the pfSense services it might be caused by the IoT network (over 150 devices).

            Is there something (like a specific service) I can "flush/restart" periodically? I would have to restart the complete Netgate every night

            S 1 Reply Last reply Oct 28, 2021, 9:46 PM Reply Quote 0
            • M
              MagikMark @abtekk
              last edited by Oct 28, 2021, 9:07 PM

              @abtekk

              According to this thread:

              https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4

              Codel has a bug. Use "taildrop" instead. You'll get same result

              A S 2 Replies Last reply Oct 28, 2021, 9:10 PM Reply Quote 0
              • A
                abtekk @MagikMark
                last edited by Oct 28, 2021, 9:10 PM

                @magikmark Thanks, I will check it out.

                1 Reply Last reply Reply Quote 0
                • S
                  SteveITS Galactic Empire @muenchris
                  last edited by Oct 28, 2021, 9:46 PM

                  @muenchris said in pfSense 2.5.2 periodic HUGE lag spikes:

                  something (like a specific service) I can "flush/restart" periodically

                  The pcscd service, as mentioned :) If you aren't using IPSec you can just stop it, though it will start when pfSense boots. Otherwise if you follow into that bug report there is a patch to disable it properly. Not saying this is your issue, but it's generally an issue on all installs eventually.

                  Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                  When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                  Upvote 👍 helpful posts!

                  1 Reply Last reply Reply Quote 0
                  • S
                    stephenw10 Netgate Administrator @MagikMark
                    last edited by Oct 29, 2021, 12:47 PM

                    @magikmark said in pfSense 2.5.2 periodic HUGE lag spikes:

                    Codel has a bug. Use "taildrop" instead. You'll get same result

                    First I've heard of that. I don't see anything recent in that thread detailing it. A lot of people are running that.
                    Is there a bug report?

                    Steve

                    M 1 Reply Last reply Oct 30, 2021, 9:04 AM Reply Quote 0
                    • M
                      MagikMark @stephenw10
                      last edited by Oct 30, 2021, 9:04 AM

                      @stephenw10

                      The thread is quite long. Here is the exact post. I think it's not Codel itself but pfsense:

                      https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4/770

                      You get this error:

                      "config_aqm Unable to configure flowset, flowset busy!" error.

                      1 Reply Last reply Reply Quote 0
                      • S
                        stephenw10 Netgate Administrator
                        last edited by Oct 30, 2021, 3:02 PM

                        @magikmark said in pfSense 2.5.2 periodic HUGE lag spikes:

                        https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4/770

                        Ah, OK. That's not a bug it's a feature. 😉

                        I've never hit that but it looks like you would only ever hit it if trying to re-configure an existing pipe that is actively in use.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        14 out of 15
                        • First post
                          14/15
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received