Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New install. Poor performance?

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jrutley @Gblenn
      last edited by

      @Gblenn I added one firewall rule to block a site, but I removed that and experienced the same issue

      J 1 Reply Last reply Reply Quote 0
      • J
        jrutley @jrutley
        last edited by

        48822408-2ade-43ac-9033-905ca93b19bd-image.png

        I'm not entirely sure how to update to 2.7.2, at least from this menu.

        G 1 Reply Last reply Reply Quote 0
        • G
          Gblenn @jrutley
          last edited by

          @jrutley Check the next tab, Update Settings...

          What modem do you have from the ISP, and do you see that you have a public IP on pfsense WAN?

          J 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Run: certctl rehash then check again.

            1 Reply Last reply Reply Quote 0
            • J
              jrutley @Gblenn
              last edited by

              it's a Hitron CODA 4680, and yes the WAN interface shows that I have a public IP

              1 Reply Last reply Reply Quote 0
              • J
                jrutley
                last edited by

                The certctl rehash did the trick for that. Thank you.

                I just noticed now that the gateway IP is different from the WAN interface
                (unless that .225 is the CMTS, perhaps)

                09699bb5-f5e9-44ad-a7c4-be57b147838e-image.png

                J 1 Reply Last reply Reply Quote 0
                • J
                  jrutley @jrutley
                  last edited by

                  After upgrading to 2.7.2, I still experience the same issue

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    The gateway should be different, that;'s the upstream device at the ISP. The WAN IP is local to pfSense.

                    The first thing I would do is disable the Gateway Monitoring Action (not gateway monitoring!) in Sys > Routing > Gateways, edit the WAN gateway. An external monitoring IP is already set so that's good.

                    Check Status > Interfaces for errors or collisions. That packet loss it pretty catastrophic!

                    J 1 Reply Last reply Reply Quote 0
                    • J
                      jrutley @stephenw10
                      last edited by

                      @stephenw10

                      monitoring action is disabled

                      <snip IP info>
                      MTU
                      1500
                      Media
                      1000baseT <full-duplex>
                      In/out packets
                      1901037/1054338 (2.22 GiB/656.63 MiB)
                      In/out packets (pass)
                      1901037/1054338 (2.22 GiB/656.63 MiB)
                      In/out packets (block)
                      660/1 (292 KiB/40 B)
                      In/out errors
                      0/0
                      Collisions
                      0
                      Interrupts
                      2689149 (874/s)

                      J 1 Reply Last reply Reply Quote 0
                      • J
                        jrutley @jrutley
                        last edited by

                        I should have said "monitoring action is now disabled" earlier.

                        I'm still getting huge packet loss. I checked the modem signal levels, and they look pretty good. I'm tempted to try one of the other two disabled ports.

                        The other thing I did was disable IPv6 to see if that would help. It didn't.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by stephenw10

                          Do you only see loss when running a test or loading the link in some other way?

                          And you don't see any errors on the LAN side NIC either?

                          Trying a different port/NIC is always a good test.

                          J 1 Reply Last reply Reply Quote 0
                          • J
                            jrutley @stephenw10
                            last edited by

                            @stephenw10
                            The lowest I've seen the loss is around 6%, presumably when the network is mostly idle.
                            Most of the time it's around 16-20%

                            Zero errors on the LAN side too

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by stephenw10

                              Hmm, well that's not great!

                              Try running a ping test from pfSense dircetly so you're only testing the WAN link.

                              Do you see loss if you just ping the pfSense LAN or WAN IP from an internal client?

                              If you can try putting a switch between the WAN NIC and modem to make sure it's not some low level connection issue.

                              J 1 Reply Last reply Reply Quote 0
                              • J
                                jrutley @stephenw10
                                last edited by

                                @stephenw10
                                e7b2e762-1976-4d2c-8115-792026fc494f-image.png

                                Although I managed to find a spot to put the switch, unfortunately putting a switch in front didn't help :(

                                J 1 Reply Last reply Reply Quote 0
                                • J
                                  jrutley @jrutley
                                  last edited by

                                  no loss when pinging only within the LAN

                                  no loss when pinging the WAN IP from local network

                                  J 1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Hmm, try installing the MTR package. See if you can easily see where that packet loss is happening.

                                    Is there anything fundamentally different with the TPLink router that doesn't show loss. Different WAN link rate for example?

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      SteveITS Galactic Empire @jrutley
                                      last edited by

                                      @jrutley Not seeing above that you tried different patch cables…?

                                      Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                      When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                      Upvote 👍 helpful posts!

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        jrutley @jrutley
                                        last edited by

                                        I can definitely try installing packages to help diagnose the issue.

                                        And Steve, thanks for the suggestion, but multiple cables were used :)
                                        I just hadn't mentioned that

                                        J 1 Reply Last reply Reply Quote 0
                                        • J
                                          jrutley @jrutley
                                          last edited by

                                          I hate to say this, but it looks like I just had really bad luck.

                                          Last night I switched back to my old router, and the speeds didn't improve. I have since run mtr with and without the new router, and the loss % across the different hops is very similar for both.

                                          Maybe I should restore the TP-Link, put this box behind a second NAT, and try some file transfers across it just to be 100% sure, but I have a feeling that there's nothing wrong with this box, and that my internet connection decided to take a dump at the wrong time.

                                          Sorry for wasting everyone's time on this one 😰

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Ha, well that's a good outcome compared with some obscure hardware incompatibility. 😉

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.