Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Throughput from Lan to Wan

    Scheduled Pinned Locked Moved General pfSense Questions
    26 Posts 4 Posters 6.5k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O Offline
      Orkopaede @johnpoz
      last edited by

      @johnpoz I will give that a try.

      For the NAT problem. I guess the nat didn't work because everything was or is allowed in the firewall rules for this interface. How would the rules have to be set here so that the NAT can still work? Allow everything except LAN interface where the 8.227 is connected?

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator @Orkopaede
        last edited by

        @orkopaede nothing should have to change in the firewall rules, if the traffic was allowed before. But if you had an existing state, you would need to clear out those old states that were not doing nat.. Or just wait til they go away on their own on timeouts.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 25.07 | Lab VMs 2.8, 25.07

        O 2 Replies Last reply Reply Quote 0
        • O Offline
          Orkopaede @johnpoz
          last edited by

          @johnpoz Okay then I'll just reset the stats or wait. I have to go and pick up my child from kindergarten anyway so.
          First of all, thank you for your time and help. I'll test further tomorrow. Thank you!

          johnpozJ 1 Reply Last reply Reply Quote 0
          • O Offline
            Orkopaede @johnpoz
            last edited by Orkopaede

            @johnpoz Finally with the last test

            6473ec23-6255-4aa3-b73b-cce4576479ae-grafik.png

            Speeds:

            iperf3.exe -c 192.168.8.227 -V
            iperf 3.1.3
            CYGWIN_NT-10.0 WernerLaptop 2.5.1(0.297/5/3) 2016-04-21 22:14 x86_64
            Time: Wed, 22 Feb 2023 15:07:53 GMT
            Connecting to host 192.168.8.227, port 5201
                  Cookie: WernerLaptop.1677078473.811245.0a2fc
                  TCP MSS: 0 (default)
            [  4] local 172.28.0.1 port 5984 connected to 192.168.8.227 port 5201
            Starting Test: protocol: TCP, 1 streams, 131072 byte blocks, omitting 0 seconds, 10 second test
            [ ID] Interval           Transfer     Bandwidth
            [  4]   0.00-1.00   sec  77.4 MBytes   648 Mbits/sec
            [  4]   1.00-2.00   sec  81.8 MBytes   686 Mbits/sec
            [  4]   2.00-3.00   sec  87.6 MBytes   735 Mbits/sec
            [  4]   3.00-4.00   sec  65.5 MBytes   550 Mbits/sec
            [  4]   4.00-5.00   sec  96.8 MBytes   812 Mbits/sec
            [  4]   5.00-6.00   sec  90.2 MBytes   757 Mbits/sec
            [  4]   6.00-7.00   sec  91.9 MBytes   771 Mbits/sec
            [  4]   7.00-8.00   sec  75.6 MBytes   635 Mbits/sec
            [  4]   8.00-9.00   sec  78.8 MBytes   660 Mbits/sec
            [  4]   9.00-10.00  sec  88.4 MBytes   742 Mbits/sec
            - - - - - - - - - - - - - - - - - - - - - - - - -
            Test Complete. Summary Results:
            [ ID] Interval           Transfer     Bandwidth
            [  4]   0.00-10.00  sec   834 MBytes   699 Mbits/sec                  sender
            [  4]   0.00-10.00  sec   834 MBytes   699 Mbits/sec                  receiver
            CPU Utilization: local/sender 11.0% (1.4%u/9.6%s), remote/receiver 2.5% (0.6%u/1.9%s)
            

            Okay now i have to go.

            1 Reply Last reply Reply Quote 0
            • johnpozJ Offline
              johnpoz LAYER 8 Global Moderator @Orkopaede
              last edited by johnpoz

              @orkopaede you can always just kill any state in the state table directly. Under diagnostics, state table.

              edit:
              That seems low for whatever reason.. Notice in mine it was a very small hit to the speed, compared to just lan to lan speed.. And your on an I5.. I would think that is more powerful than my sg4860..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 25.07 | Lab VMs 2.8, 25.07

              O 1 Reply Last reply Reply Quote 1
              • O Offline
                Orkopaede @johnpoz
                last edited by

                @johnpoz i selected the wrong interface...

                bae59868-48e8-403e-9ca1-1d1bdc2aa6d4-grafik.png

                LAN not TESTINTERNET

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ Offline
                  johnpoz LAYER 8 Global Moderator @Orkopaede
                  last edited by

                  @orkopaede yeah you need to put the nat on the correct interface for the direction of your traffic flow ;)

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 25.07 | Lab VMs 2.8, 25.07

                  O 1 Reply Last reply Reply Quote 0
                  • O Offline
                    Orkopaede @johnpoz
                    last edited by

                    @johnpoz ok i tested it a bit further and i think it is a windows problem. I repeated the tests on a Linux PC and I always got my 200Mbit without establishing multiple connections (iperf option -P). I don't think I have to bother anyone here with this topic. ;) Thank you once again for the help.

                    johnpozJ 1 Reply Last reply Reply Quote 1
                    • johnpozJ Offline
                      johnpoz LAYER 8 Global Moderator @Orkopaede
                      last edited by johnpoz

                      @orkopaede said in Throughput from Lan to Wan:

                      i tested it a bit further and i think it is a windows problem

                      did you actually enable window scaling - all the posts you show it disabled.

                      edit: never mind looks like you did enable it.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 25.07 | Lab VMs 2.8, 25.07

                      1 Reply Last reply Reply Quote 0
                      • S Offline
                        SteveITS Rebel Alliance @Orkopaede
                        last edited by

                        @orkopaede I don’t see in the thread that you checked traffic shaping? I’ve seen many threads where an old setting was left enabled.

                        Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                        When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                        Upvote 👍 helpful posts!

                        O 1 Reply Last reply Reply Quote 0
                        • O Offline
                          Orkopaede @SteveITS
                          last edited by

                          @steveits Hi, traffic shaping is disabled on all Interface. I never touched this part of pfsense.

                          O 1 Reply Last reply Reply Quote 0
                          • O Offline
                            Orkopaede @Orkopaede
                            last edited by

                            @orkopaede So i guess it is what it is... a Windows problem.
                            When i find the Problem i will post it here, hopefully with a solution.

                            NightlySharkN 1 Reply Last reply Reply Quote 0
                            • NightlySharkN Offline
                              NightlyShark @Orkopaede
                              last edited by

                              @orkopaede Hi! Run wireshark on the Windows machine and see if anything catches your eye. Also check Windows power-saving for the NIC you are connecting from. For some poorly written drivers, Windows tends to make some bass-ackwards assumptions about what "energy saving" vs "disrupting key functionality" means.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.