Gigabit internet PPPoE and pfSense

riahc8

@stephenw10 said in Gigabit internet PPPoE and pfSense:

Ah, OK! Yeah that's not a single thread PPPoE limitation. That looks more like a link speed/duplex mismatch somewhere. Throughput that low has to be some low level mis-configuration.

I would try testing to/from the firewall directly with iperf to determine which interface is at fault. If it's not both.

Steve

How would I properly test it? Could you please tell me a example so I can post the results?

Thank you

stephenw10

Install the iperf package in pfSense then run an iperf3 server there. Then test against it using an iperf client on the LAN. I would expect to see Gig line rate there, ~940Mbps, unless you have any traffic shaping in place.

Steve

riahc8

@stephenw10 said in Gigabit internet PPPoE and pfSense:

Install the iperf package in pfSense then run an iperf3 server there. Then test against it using an iperf client on the LAN. I would expect to see Gig line rate there, ~940Mbps, unless you have any traffic shaping in place.

Steve

Hmmm I don't have any ethernet physical LAN clients.

Just VMs and a laptop.

stephenw10

Well you should be able to get Gigabit between pfSense and another VM in the same host.

But that does mean the issue is far more likely to be on the WAN side.

Steve

riahc8

@stephenw10 said in Gigabit internet PPPoE and pfSense:

Well you should be able to get Gigabit between pfSense and another VM in the same host.

But that does mean the issue is far more likely to be on the WAN side.

Steve

Yeah, I believe I can test that out.

riahc8

Sorry about the delay:

Here is a test from a linux VM to the pfsense VM on the same physical host:

Connecting to host 192.168.1.1, port 5201
[ 4] local 192.168.1.71 port 41266 connected to 192.168.1.1 port 5201
[ ID] Interval Transfer Bandwidth Retr Cwnd
[ 4] 0.00-1.00 sec 343 MBytes 2.88 Gbits/sec 0 764 KBytes
[ 4] 1.00-2.00 sec 398 MBytes 3.33 Gbits/sec 0 1.51 MBytes
[ 4] 2.00-3.00 sec 396 MBytes 3.32 Gbits/sec 0 2.03 MBytes
[ 4] 3.00-4.00 sec 394 MBytes 3.30 Gbits/sec 0 2.03 MBytes
[ 4] 4.00-5.00 sec 401 MBytes 3.37 Gbits/sec 0 2.03 MBytes
[ 4] 5.00-6.00 sec 391 MBytes 3.28 Gbits/sec 0 2.03 MBytes
[ 4] 6.00-7.00 sec 400 MBytes 3.36 Gbits/sec 0 2.03 MBytes
[ 4] 7.00-8.00 sec 400 MBytes 3.36 Gbits/sec 0 2.03 MBytes
[ 4] 8.00-9.00 sec 396 MBytes 3.32 Gbits/sec 0 2.03 MBytes
[ 4] 9.00-10.00 sec 396 MBytes 3.32 Gbits/sec 0 2.03 MBytes

[ ID] Interval Transfer Bandwidth Retr
[ 4] 0.00-10.00 sec 3.82 GBytes 3.28 Gbits/sec 0 sender
[ 4] 0.00-10.00 sec 3.82 GBytes 3.28 Gbits/sec receiver

iperf Done.

I ran another test from another linux VM to the pfsense BUT they are on different physical hosts:

Connecting to host 192.168.1.1, port 5201
[ 4] local 192.168.1.80 port 42140 connected to 192.168.1.1 port 5201
[ ID] Interval Transfer Bandwidth Retr Cwnd
[ 4] 0.00-1.00 sec 12.2 MBytes 103 Mbits/sec 0 228 KBytes
[ 4] 1.00-2.00 sec 11.4 MBytes 95.6 Mbits/sec 0 228 KBytes
[ 4] 2.00-3.00 sec 11.0 MBytes 92.2 Mbits/sec 0 238 KBytes
[ 4] 3.00-4.00 sec 11.5 MBytes 96.7 Mbits/sec 0 238 KBytes
[ 4] 4.00-5.00 sec 10.9 MBytes 91.7 Mbits/sec 0 238 KBytes
[ 4] 5.00-6.00 sec 11.5 MBytes 96.6 Mbits/sec 0 238 KBytes
[ 4] 6.00-7.00 sec 11.2 MBytes 93.6 Mbits/sec 0 284 KBytes
[ 4] 7.00-8.00 sec 11.3 MBytes 95.1 Mbits/sec 0 298 KBytes
[ 4] 8.00-9.00 sec 11.4 MBytes 95.6 Mbits/sec 0 298 KBytes
[ 4] 9.00-10.00 sec 11.3 MBytes 95.2 Mbits/sec 0 298 KBytes

[ ID] Interval Transfer Bandwidth Retr
[ 4] 0.00-10.00 sec 114 MBytes 95.5 Mbits/sec 0 sender
[ 4] 0.00-10.00 sec 112 MBytes 94.2 Mbits/sec receiver

iperf Done.

Does everything look good? I dont know how to interpret this.

Patch

@riahc8 said in Gigabit internet PPPoE and pfSense:

from another linux VM to the pfsense BUT they are on different physical hosts:

@riahc8 said in Gigabit internet PPPoE and pfSense:

95.6 Mbits/sec

??bad cable supporting only 100Mb connection

stephenw10

Yup, looks like a bad link to the host pfSense is on.

riahc8

@stephenw10 But the cable is cat6 afaik that should run at 10Gb (my cards only support 1Gb)

johnpoz

@riahc8 said in Gigabit internet PPPoE and pfSense:

But the cable is cat6

Doesn't mean its not bad..

stephenw10

...or just misconfigured somewhere.

johnpoz

@riahc8 said in Gigabit internet PPPoE and pfSense:

afaik that should run at 10Gb

BTW - cat 5e can also do 10ge for short distances.. But just because something is rated for something doesn't mean it not something wrong with it, 100mb only needs 4 wires out of the 8, for gig or higher you need all 4 pairs of wires, not just 2.

If your set to auto on gig interfaces and it only comes up 100, then something wrong.

Or something set wrong - but a 95mbps speed screams the connection is only 100. That first 1 showing 103mbps could just be a math sort of error in the tool?

JKnott

@riahc8 said in Gigabit internet PPPoE and pfSense:

But the cable is cat6 afaik that should run at 10Gb (my cards only support 1Gb)

Which means it won't make any difference. Gb Ethernet was designed for plain CAT5 and predates 5e.

johnpoz

^ yup, cat 5 runs gig all day long for full 100m of length without any issues. As long as nothing wrong with the cable. When gig first came out - kind of the whole thing that it could run on the existing installed 5..

JKnott

@johnpoz said in Gigabit internet PPPoE and pfSense:

BTW - cat 5e can also do 10ge for short distances.

Yep. Those specs are for 100M (330') of cable. Not many homes have runs that long. I was just measuring here last week and found the longest run is 45'. That is pretty much from one end of my condo to the other.

johnpoz

@jknott yeah, I have a run in my attic as back bone if you will, just used a 100' premade cable - lots of spare cable just coiled up in the attic. When I put that in the 100' was real cheap.. And I didn't exactly know how much I needed but I knew 100 would do it because the house is only like 75 feet one side to the other ;)

JKnott

@johnpoz said in Gigabit internet PPPoE and pfSense:

^ yup, cat 5 runs gig all day long for full 100m of length without any issues. As long as nothing wrong with the cable. When gig first came out - kind of the whole thing that it could run on the existing installed 5..

I have 2 runs of plain CAT5, about 45' long that were installed in the late 90s by my cable TV company, when they installed my first cable modem. They're still going strong.

BTW, the reason I was measuring the cables is my ISP will soon be providing 8 Gb over fibre (they currently offer 2.5) and I was thinking about what I'd have to do if I went for it. One thing would be replacing CAT5 that's almost a quarter century old with CAT6. I'd also have to update my router hardware and switch, etc.. For now, I'll stick with my 500/20 connection that actually provides over 900/30, according to speedtest.

JKnott

@johnpoz said in Gigabit internet PPPoE and pfSense:

@jknott yeah, I have a run in my attic as back bone if you will, just used a 100' premade cable - lots of spare cable just coiled up in the attic. When I put that in the 100' was real cheap.. And I didn't exactly know how much I needed but I knew 100 would do it because the house is only like 75 feet one side to the other ;)

When mine was run in, I estimated the needed length and added a bit more. My ISP sent a 2 man crew that fished the cables up the wall between my living room and bedroom, along side an air duct, over my closet and bathroom ceilings and into the laudry room, when they are visible crossing the ceiling, down behind the water heater and through the wall into my "office" closet, where I terminated the Ethernet cables on keystone jacks. It took those guys 3 hours to do the job. The other ends of those cables are behind my living room and bedroom TVs, nice and handy for IPTV, which I got a couple of years ago.

riahc8

@johnpoz said in Gigabit internet PPPoE and pfSense:

@riahc8 said in Gigabit internet PPPoE and pfSense:

But the cable is cat6

Doesn't mean its not bad..

Hmmm I mean I guess its a possibility.

Could you (or others/anyone) recommend a brand to buy? Amazon is full of cables so Id rather get a decent SSTP/SFTP from a decent brand

stephenw10

You should be able to see one of the links negotiated at 100M to be sure. pfSense can't see it because the VM host presents it as a 10G NIC but the host should be able to. Or whatever it's connected to.

Steve