Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Apparent limitation on upload speeds

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    7 Posts 3 Posters 979 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K
      kscrib
      last edited by kscrib

      I recently changed ISPs. My new ISP provides 500Mbps upload and down load (previous IP had a cap of 25 Mbps upload). If I connect a PC directly to the ISPs jack, I get those advertised speeds (500up and down). But, if I connect my Netgate 5100 to the ISPs port and then connect the same PC to the 5100, my upload speeds are typically 150Mbps (300 Mbps slower), download speeds are as expected. I have done all the basic reboot stuff post ISP change. This is a home network.

      I can reproduce the problem when PC is the only device plugged into the 5100, so the problem is not related to other devices or traffic on the network.

      Any help on what I should look at? Or configuration information I need to provide for assistance? I just don't know where to start with this one. I am not an advance network engineer, but do understand some of the simple basics.

      df3380b2-0acd-4a01-b622-c303fbf9eae0-image.png

      System utilization of the 5100 is low (almost always less that 10% CPU) even when all the devices on the network are connected
      fad427af-4ee2-4cd8-8047-c02d88976b04-image.png

      S 1 Reply Last reply Reply Quote 0
      • S
        SteveITS Galactic Empire @kscrib
        last edited by

        @kscrib Double check there isn't an old traffic shaper configured. That happens occasionally.

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        K 1 Reply Last reply Reply Quote 0
        • K
          kscrib @SteveITS
          last edited by

          @steveits

          I don't see any -- screen looks the same for all interfaces - the Enable/Disable discipline is not checked

          a6c7a776-609c-4169-8898-7cee5baa623e-image.png

          S 1 Reply Last reply Reply Quote 0
          • S
            SteveITS Galactic Empire @kscrib
            last edited by

            @kscrib Other common issues are to change the patch cable(s), check the interface auto-negotiation/duplex settings, or put a switch between pfSense and the ISP router.

            Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
            When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
            Upvote 👍 helpful posts!

            K 1 Reply Last reply Reply Quote 0
            • K
              kscrib @SteveITS
              last edited by

              @steveits

              Man, I thought you were on to something, that made a lot of sense to me. I installed a 1 Gbps unmanaged switch between the ISP and the 5100. Unfortunately, it did not make a difference. Speeds are still 500 Mbps download and 150 Mpbs upload.

              M 1 Reply Last reply Reply Quote 0
              • M
                michmoor LAYER 8 Rebel Alliance @kscrib
                last edited by

                @kscrib do you have any packages installed (squid, Suricata or snort)?

                Firewall: NetGate,Palo Alto-VM,Juniper SRX
                Routing: Juniper, Arista, Cisco
                Switching: Juniper, Arista, Cisco
                Wireless: Unifi, Aruba IAP
                JNCIP,CCNP Enterprise

                1 Reply Last reply Reply Quote 0
                • K
                  kscrib
                  last edited by

                  After a few hours of troubleshooting on my own network. I took my 5100 to a friends house and was able to get the expected speeds there. So I returned home and called my ISP. They made some changes on their end (changed vlans and ports) and now it is working properly!

                  The ISP is new to the area, and still has some bumps.

                  Sorry for the question to the group, but I am good now.

                  @michmoor - I do use pfBlockerNG - but I had disabled that during troubleshooting. With all re-enabled, I am now getting expected speeds.

                  I don't have an answer to the obvious question of why did it work with the PC connected directly to the ONT. The only thing I can come up with is that I did reboot the ONT between tests, so that may have had an impact.

                  Thanks again to the group.

                  1 Reply Last reply Reply Quote 1
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.