Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    FIOS > ONT > pfSense = nojoy

    Scheduled Pinned Locked Moved General pfSense Questions
    17 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      propeto13 @stephenw10
      last edited by

      @stephenw10

      Retrieving speedtest.net server list...
      
      Selecting best server based on ping...
      
      Hosted by Hosted Backbone, LLC (Ashburn, VA) [72.52 km]: 3.803 ms
      
      Testing download speed................................................................................
      
      Download: 282.25 Mbit/s
      
      Testing upload speed......................................................................................................
      
      Upload: 9.63 Mbit/s
      
      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm, so appears to be a WAN side problem.

        I would try swapping the bce NIC for one of the ems if you can.

        P 1 Reply Last reply Reply Quote 0
        • P
          propeto13 @stephenw10
          last edited by

          @stephenw10

          yup, EM1 is now WAN

          speed results are similar

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, and it is linking as expected at 1G (auto)? With no errors/collisions?

            Do you have any traffic shaping applied?

            P 1 Reply Last reply Reply Quote 0
            • ?
              A Former User
              last edited by A Former User

              @propeto13

              My Internet speed is Down50 and Up10 but it is a little bit more coming over the line (63 Down and ~13 Upload)
              and my speedtest server is ~180 Kilometer (1k = 1000 meter) away. Test is done under a pimped and tuned APU4D4, but it has only some tuneable´s and the cpu
              is not anymore on 600MHz - 1000MHz, it is now on
              1000MHz - 1400MHz. But this is ways under your
              Xeon E3-12xx @3,0GHz CPU! You should be able
              to route one pure GBit/s up and down with your
              cpu in my eyes. Perhaps it has something to do
              with your rules set and/or iDS/IPS or perhaps
              pfblocker-NG could be involved? I am running here a
              pfSesen that is turned into a full UTM, with mSATA, modem and WiFi card, plus snort, ClamAV & Squid & SquidGuard & pfBlocker-NG, so with your hardware
              you should be able to serve a small company as I see it.

              [22.05-RELEASE][root@home.arpa]/root: speedtest-cli
              Retrieving speedtest.net configuration...
              Testing from Deutsche Telekom AG (xxx.xxx.xxx.xxx.)...
              Retrieving speedtest.net server list...
              Selecting best server based on ping...
              Hosted by Spacken.net (Hagen) [179.48 km]: 39.099 ms
              Testing download speed................................................................................
              Download: 57.90 Mbit/s
              Testing upload speed......................................................................................................
              Upload: 11.27 Mbit/s
              
              
              1 Reply Last reply Reply Quote 0
              • P
                propeto13 @stephenw10
                last edited by

                @stephenw10

                link is normal 1G auto there are some errors on the LAN interface.
                no traffic shaping.

                reseat the NIC, pfblocker/snort disable all yields the same results.

                1 Reply Last reply Reply Quote 0
                • P
                  propeto13
                  last edited by

                  buffer bloat limiter was the issue.
                  -limiter adjusted for the new connection.

                  resolved.

                  ? 1 Reply Last reply Reply Quote 0
                  • ?
                    A Former User @propeto13
                    last edited by

                    @propeto13 said in FIOS > ONT > pfSense = nojoy:

                    buffer bloat limiter was the issue.
                    -limiter adjusted for the new connection.

                    resolved.

                    Perhaps you will be so friendly and say exactly what and where you were setting up? Only for other find later that threat here over google or the forum search.

                    P 1 Reply Last reply Reply Quote 1
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by stephenw10

                      You have to set the expected available bandwidth on the WAN when configuring Limiters for buffer bloat because in order to control it you need the Limiter to be the throttling point in the link.
                      So if you then change the WAN to some higher bandwidth you have to reconfigure the Limiter to match that or you will be stuck at the previous values. As OP found. 😉

                      Steve

                      ? 1 Reply Last reply Reply Quote 1
                      • ?
                        A Former User @stephenw10
                        last edited by

                        @stephenw10
                        Well said, thank you for clarifying this to me.

                        1 Reply Last reply Reply Quote 0
                        • P
                          propeto13 @A Former User
                          last edited by

                          @dobby_

                          Firewall > Traffic Shaper > Limiters

                          LW has a video explaining this also link text

                          1 Reply Last reply Reply Quote 1
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.