Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense 2.6.0 High latency and packet loss.

    Scheduled Pinned Locked Moved General pfSense Questions
    38 Posts 6 Posters 6.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SteveITS Galactic Empire @Gerard64
      last edited by

      @gerard64 Does Diagnostics/System Activity show high CPU usage for any processes?

      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
      Upvote ๐Ÿ‘ helpful posts!

      G 2 Replies Last reply Reply Quote 0
      • G
        Gerard64 @SteveITS
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • G
          Gerard64 @SteveITS
          last edited by Gerard64

          @steveits While i run bufferbloat test CPU usage on dashboard is ~ 20%

          in Diagnostics/System Activity i see CPU's 100%

          7e2dd6bb-7d0a-4a8d-8fb4-59b69dbb243a-afbeelding.png

          56efee6e-4a2b-4820-87fb-bc09bdda7c39-afbeelding.png

          dfe5a6e4-4c92-438c-a9fa-79aa16e05ad5-afbeelding.png

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Mmm, those latency spikes are up to 30s! Which is so high it cannot be real.

            What is your WAN connection there? How is it physically connected?

            What is the WAN gateway monitoring? The labels on the gateway graphs are unclear.

            Steve

            G 1 Reply Last reply Reply Quote 0
            • G
              Gerard64 @stephenw10
              last edited by Gerard64

              @stephenw10 from my Cable modem I have a cat7 cable to my 2x rj45 wall sockets. From the wall sockets I run 2x cat7 cables to the patchpanel in my computer room. From the patchpanel I have another cat7 cable to the igc0 port of the micro firewall appliance system,

              I tested all cables with my network cable tester and all cables are oke.

              With the HP T730 the problems were because of the Broadcom nics not working with pfSense 2.6.0 so i bought this new system with intel i225 nics and i still have WAN problems.

              I don't know what you mean with:
              "What is the WAN gateway monitoring? The labels on the gateway graphs are unclear."

              I have a constant pinger running on the ISP gateway ipv4 (dpinger) & ipv6 and I have a pinger running on 9.9.9.9 (quad9 dns server)

              All give high ping times.

              chpalmerC 1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                I meant what IP are you using for gateway monitoring but I assume now you are using the default, the actual gateway IP, and you have added 9.9.9.9 as an additional gateway to get monitoring data?

                Have you tested the pfSense WAN connected directly to the cable modem?

                Have you tested a laptop directly on the cable modem to be sure it's clean at that point?

                Steve

                G 1 Reply Last reply Reply Quote 0
                • chpalmerC
                  chpalmer @Gerard64
                  last edited by

                  @gerard64 Who is your ISP and what model cable modem are you using? Cable companies have been known to move to the next DOCSIS version without telling their base.. especially the ones that do not rent equipment from them.

                  Triggering snowflakes one by one..
                  Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                  1 Reply Last reply Reply Quote 0
                  • G
                    Gerard64 @stephenw10
                    last edited by

                    @stephenw10 Yes i am using the default for ipv4 and ipv6 and added quad9 thats right.
                    I have not yet tested the pfSense directly to the WAN yet. I was planning to do that this afternoon to go thru my backyard with a 20 meter long network cable i have.

                    I did test with a laptop directly connected to the modem and connection is then bad too but the ISP Ziggo tells me there is nothing wrong with the modem or connection.

                    This laptop directly to the modem test is a bit longer ago and in the mean time i got a new modem so will test that again also today and let you know.

                    @chpalmer My isp is Ziggo (The Netherlands) with 350mbps down and 35 mbps up.
                    The modem is a so called connectbox https://www.ziggo.nl/klantenservice/apparaten/wifi-modems/connect-box

                    I belief this is a DOCSIS 3.0 few weeks ago i had a very old UBEE with only ipv4. With the new Connectbox i have dual stack ipv4 and ipv6 and both work besides the high ping and stuttering.

                    Before i got this new modem i got a letter from my isp telling me that my modem is going to be swapped to a new more modern moden and they did and from then on i could do dual stack wich is pretty nice well besides the problems i also had with the old ubee modem.

                    Ubee modem was a modem only not a router.
                    This new Connectbox is a router switched to bridge mode.

                    stephenw10S T 2 Replies Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator @Gerard64
                      last edited by

                      @gerard64 said in pfSense 2.6.0 High latency and packet loss.:

                      This laptop directly to the modem test is a bit longer ago and in the mean time i got a new modem so will test that again also today and let you know.

                      Ah, definitely confirm that first then. We have seen modems that introduce bad latency before. Though never this bad....

                      1 Reply Last reply Reply Quote 1
                      • T
                        TheNarc @Gerard64
                        last edited by

                        @gerard64 You'd need to check the exact model number, but it looks like the Ziggo modem may be a Puma 6 modem which are subject to enormous ping spikes:
                        https://pypi.org/project/compal/

                        G 1 Reply Last reply Reply Quote 2
                        • G
                          Gerard64
                          last edited by

                          @stephenw10

                          079ba7e3-3fcf-406c-8d10-5db271d46707-afbeelding.png

                          1 Reply Last reply Reply Quote 0
                          • G
                            Gerard64 @TheNarc
                            last edited by Gerard64

                            @thenarc oke interesting it could be the modem that's the problem then.

                            My modem is a Arris

                            3312f711-e3f2-4e21-ac17-5ca097becf1a-afbeelding.png

                            1453a7de-2c97-4de2-bc66-9c6d56666f7b-afbeelding.png

                            T 1 Reply Last reply Reply Quote 0
                            • T
                              TheNarc @Gerard64
                              last edited by

                              @gerard64 Yeah from everything I can tell, that's a Puma 6 modem:

                              https://approvedmodems.org/bad-modems/

                              https://www.techjamaica.com/forums/showthread.php?115932-FLOW-Modem-Issues-TG2492LG-(the-white-one)-Intel-Puma-6

                              https://www.classactionlawyers.com/puma6

                              1 Reply Last reply Reply Quote 1
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Yup 600ms is still very high. That's above the default 500ms that pfSense uses for gateway monitoring to indicate the gateway is down.
                                If you're seeing that with a laptop on the modem directly pfSense isn't going to be able to improve that much. FQ-Codel can only do so much.
                                However you should either set the gateway monitoring latency value to something much higher or disable monitoring for now. That will prevent pfSense restarting services repeatedly which is probably what was causing the extreme latency you saw earlier.

                                Steve

                                1 Reply Last reply Reply Quote 1
                                • G
                                  Gerard64
                                  last edited by

                                  @TheNarc Interesting. I am going to communicate that with my provider maybe they have a fix or i can get a other modem. I still have to read all the links in your reply but wanted to thank you first for this information. Thank you!

                                  @stephenw10 Very helpful information. I wasn't aware of pfSense used the gateway latency to restart surten services wen it is above 500ms. That explains a lot. And nice new information about the behavior of pfSense i didn't know. Thank you!

                                  1 Reply Last reply Reply Quote 1
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    For more info see:
                                    https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html#advanced-gateway-settings

                                    G 1 Reply Last reply Reply Quote 1
                                    • G
                                      Gerard64 @stephenw10
                                      last edited by

                                      @stephenw10 This is very helpful for me. Why didn't i think of this ๐Ÿ˜‰
                                      Thank you again!

                                      1 Reply Last reply Reply Quote 0
                                      • G
                                        Gerard64
                                        last edited by

                                        @TheNarc

                                        I contacted my ISP and we talked about the know modem latency problems. They are sending me a other (Ubee) modem to test. So fingers crossed this Ubee modem works better ๐Ÿคž

                                        T 1 Reply Last reply Reply Quote 0
                                        • T
                                          TheNarc @Gerard64
                                          last edited by

                                          @gerard64 Great news! I'll be very surprised if that does not fix it. Those Puma 6 modems were a rather large scandal, largely because ISPs have not been proactive about replacing them (from what I can tell they usually only will when people complain, even though they know that they're fundamentally flawed). Good luck!

                                          G 1 Reply Last reply Reply Quote 0
                                          • G
                                            Gerard64 @TheNarc
                                            last edited by Gerard64

                                            @thenarc yeah I noticed that i had to write and prove several times what the problems exactly was. After i posted your story about the known puma chipset latency problems a other community user pointed out to trade my modem for a Ubee type. This morning a ziggo worker confirmed the problem and offered to send me a Ubee modem. Tomorrow or the day after tomorrow i will receive the new modem. I will let you know how it goes.

                                            1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.