Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Only getting half speed

    Scheduled Pinned Locked Moved General pfSense Questions
    11 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Check Status > Interfaces. Do you see the ports linked at the expected speeds? Are there any errors shown?

      How are you testing the speed?

      Steve

      S 1 Reply Last reply Reply Quote 0
      • S
        swemattias @stephenw10
        last edited by

        @stephenw10 The interfaces are connected, how do I check connect speed in that UI?
        No errors what so ever.

        Using speedtest.net. And as I am in Sweden bredbandskollen. :)

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @swemattias
          last edited by

          @swemattias said in Only getting half speed:

          And as I am in Sweden

          And only 500/500 what are you out in the boonies.. Doesn't everyone have like 10G/10G in Sweden for like 4 euro a month ;) heheh

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          S 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            It should be shown as: Media 1000baseSX <full-duplex> or similar.

            Or you run ifconfig -va at the command line to see that.

            Do you have any packages installed?

            johnpozJ 1 Reply Last reply Reply Quote 1
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @stephenw10
              last edited by

              Off the top, something like a IPS or Ntop could put a hit on performance.. Or even maybe some of the bandwidth monitoring tools like darkstat or something?

              I would think a duplex mismatch would put you even lower.. If I had to guess you have sort of limiter or shaper setup, or something like ntop/ips stepping on your performance.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              Sergei_ShablovskyS 1 Reply Last reply Reply Quote 2
              • S
                swemattias @johnpoz
                last edited by swemattias

                @johnpoz 500/500 is 1,5 euro a month. 1000/1000 34 euro. Was easy choosing. But I am working on getting a new ISP, then Ill get 10G/10G for the same price as 500/500. :)

                So just for fun I hooked It up behind the ISP router. The gui for pfSense feels snappier, I run speedtest on the inside, I get 500/500. When I run the speediest-cli on the command line I get 250/250. I will keep digging.

                So hooked it up again directly, no ISP router. Now I get 500/500 from the inside, which I did not get before.
                Still from the command line inside pfSense I get 250/250. It has to be something with the tool not the speed.
                I use speedtests webclient on my comp and get 500/500. It has to be something with what measure server the speediest-cli uses.

                Retrieving speedtest.net configuration...
                Testing from Telenor Sverige AB (IP)...
                Retrieving speedtest.net server list...
                Selecting best server based on ping...
                Hosted by A3 Allmänna IT - och Telekomaktiebolaget (Stockholm) [341.31 km]: 24.905 ms
                Testing download speed................................................................................
                Download: 239.04 Mbit/s
                Testing upload speed......................................................................................................
                Upload: 222.19 Mbit/s
                

                Result inside:
                https://ibb.co/TTWjR9p

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @swemattias
                  last edited by johnpoz

                  @swemattias that is not a valid test to be honest.. Pfsense not meant to be a client/server sending data - its firewall/router - it routes traffic..

                  There have been countless threads about this ;)

                  Not saying such a test might not have some value - but its not a good test for throughput.. Test through pfsense, not from pfsense.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  Sergei_ShablovskyS 1 Reply Last reply Reply Quote 1
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Yup especially on something relatively low powered like the 2100. The speedtest process itself uses significant CPU cycles.

                    1 Reply Last reply Reply Quote 0
                    • Sergei_ShablovskyS
                      Sergei_Shablovsky @johnpoz
                      last edited by Sergei_Shablovsky

                      @johnpoz said in Only getting half speed:

                      Off the top, something like a IPS or Ntop could put a hit on performance.. Or even maybe some of the bandwidth monitoring tools like darkstat or something?

                      Because of this each time that user need bandwidth monitoring ON EXACTLY GATE/FW, I suggest NetData.

                      Of course, next step up are “collector-agent” tools like Prometheus+Grafana, Telegraf… But this is in case You agree to have separate monitoring server.

                      P.S.
                      Would be great, if Netgate exclude OUTDATED tools like Darkstat, NtopNG, BandwidthD and include trafshow and NetData in CE version.
                      And as next step up give instructions how collect net flow data in new but reputable advanced systems like LibreNMS and Prometheus.

                      I would think a duplex mismatch would put you even lower.. If I had to guess you have sort of limiter or shaper setup, or something like ntop/ips stepping on your performance.

                      99,9% of ISP in Europe and US using traffic shaper profile on user. And NEVER inform You about this ;)

                      —
                      CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                      Help Ukraine to resist, save civilians people’s lives !
                      (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                      1 Reply Last reply Reply Quote 0
                      • Sergei_ShablovskyS
                        Sergei_Shablovsky @johnpoz
                        last edited by Sergei_Shablovsky

                        @johnpoz said in Only getting half speed:

                        @swemattias that is not a valid test to be honest.. Pfsense not meant to be a client/server sending data - its firewall/router - it routes traffic..

                        Because of this:

                        • in official docs directly point that Speedtest/Fast/Librespeed/iperf3 test need to be done ON SETUP PHASE, not on the top of normal workloads;
                        • in official docs put step-by-step instructions how to test with each of above instruments;
                        • provide pre-installed tools(in pfSense’s terms “Services” or “Diagnostic tools”) to testing bandwidth of uplinks and site-site connection, VPN connection;

                        There have been countless threads about this ;)

                        Not saying such a test might not have some value - but its not a good test for throughput.. Test through pfsense, not from pfsense.

                        Only knows what is uplink bandwidth, possible to go forward to measure “through pfSense”.
                        That’s RIGHT logic !

                        Why fighting with a hundreds of thousands of users?
                        Much better to give them instruments and instructions and questions about this “why my speed is so slow” on this forum decrease on 30-40%.

                        —
                        CLOSE SKY FOR UKRAINE https://youtu.be/_tU1i8VAdCo !
                        Help Ukraine to resist, save civilians people’s lives !
                        (Take an active part in public protests, push on Your country’s politics, congressmans, mass media, leaders of opinion.)

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.