pfSense 2.5.2 periodic HUGE lag spikes

muenchris

@abtekk Thanks, I will try and test for a couple of days then let you know

muenchris

@abtekk Quick question: I did not select any of my interfaces in the firewall rule. Do I have to select all interfaces that I use in my load-balancer gateway group or keep them all unselected?

SteveITS

@muenchris said in pfSense 2.5.2 periodic HUGE lag spikes:

If I reboot the 6100 I do not see any lag for a day or so

A day seems fast for my suggestion but check to see if it's running out of memory. pcscd has a memory leak.

OTOH if the Internet pipe is full then that will back up everything and traffic shaping can help that a lot.

muenchris

@steveits My network setup is quite complicated. Behind the pfSense/6100 there is a Unifi UDM Pro that manages my main network that has 5 sub-networks (IoT, Cameras, Media, Gaming and Business). All firewall rules are managed by the UDM Pro - the pfSense is "only" load balancing. This results in my triple-NAT setup.
Also my WLANs are all LTE router with non-consistent internet speeds (very different for time of day and day of week).
Especially the (isolated) IoT network creates a lot of "mini-Connections" to their respective clouds.
If there is a memory leak in one of the pfSense services it might be caused by the IoT network (over 150 devices).

Is there something (like a specific service) I can "flush/restart" periodically? I would have to restart the complete Netgate every night

MagikMark

@abtekk

According to this thread:

https://forum.netgate.com/topic/112527/playing-with-fq_codel-in-2-4

Codel has a bug. Use "taildrop" instead. You'll get same result

abtekk

@magikmark Thanks, I will check it out.

SteveITS

@muenchris said in pfSense 2.5.2 periodic HUGE lag spikes:

something (like a specific service) I can "flush/restart" periodically

The pcscd service, as mentioned :) If you aren't using IPSec you can just stop it, though it will start when pfSense boots. Otherwise if you follow into that bug report there is a patch to disable it properly. Not saying this is your issue, but it's generally an issue on all installs eventually.