Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New install. Poor performance?

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Run: certctl rehash then check again.

      1 Reply Last reply Reply Quote 0
      • J
        jrutley @Gblenn
        last edited by

        it's a Hitron CODA 4680, and yes the WAN interface shows that I have a public IP

        1 Reply Last reply Reply Quote 0
        • J
          jrutley
          last edited by

          The certctl rehash did the trick for that. Thank you.

          I just noticed now that the gateway IP is different from the WAN interface
          (unless that .225 is the CMTS, perhaps)

          09699bb5-f5e9-44ad-a7c4-be57b147838e-image.png

          J 1 Reply Last reply Reply Quote 0
          • J
            jrutley @jrutley
            last edited by

            After upgrading to 2.7.2, I still experience the same issue

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              The gateway should be different, that;'s the upstream device at the ISP. The WAN IP is local to pfSense.

              The first thing I would do is disable the Gateway Monitoring Action (not gateway monitoring!) in Sys > Routing > Gateways, edit the WAN gateway. An external monitoring IP is already set so that's good.

              Check Status > Interfaces for errors or collisions. That packet loss it pretty catastrophic!

              J 1 Reply Last reply Reply Quote 0
              • J
                jrutley @stephenw10
                last edited by

                @stephenw10

                monitoring action is disabled

                <snip IP info>
                MTU
                1500
                Media
                1000baseT <full-duplex>
                In/out packets
                1901037/1054338 (2.22 GiB/656.63 MiB)
                In/out packets (pass)
                1901037/1054338 (2.22 GiB/656.63 MiB)
                In/out packets (block)
                660/1 (292 KiB/40 B)
                In/out errors
                0/0
                Collisions
                0
                Interrupts
                2689149 (874/s)

                J 1 Reply Last reply Reply Quote 0
                • J
                  jrutley @jrutley
                  last edited by

                  I should have said "monitoring action is now disabled" earlier.

                  I'm still getting huge packet loss. I checked the modem signal levels, and they look pretty good. I'm tempted to try one of the other two disabled ports.

                  The other thing I did was disable IPv6 to see if that would help. It didn't.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by stephenw10

                    Do you only see loss when running a test or loading the link in some other way?

                    And you don't see any errors on the LAN side NIC either?

                    Trying a different port/NIC is always a good test.

                    J 1 Reply Last reply Reply Quote 0
                    • J
                      jrutley @stephenw10
                      last edited by

                      @stephenw10
                      The lowest I've seen the loss is around 6%, presumably when the network is mostly idle.
                      Most of the time it's around 16-20%

                      Zero errors on the LAN side too

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by stephenw10

                        Hmm, well that's not great!

                        Try running a ping test from pfSense dircetly so you're only testing the WAN link.

                        Do you see loss if you just ping the pfSense LAN or WAN IP from an internal client?

                        If you can try putting a switch between the WAN NIC and modem to make sure it's not some low level connection issue.

                        J 1 Reply Last reply Reply Quote 0
                        • J
                          jrutley @stephenw10
                          last edited by

                          @stephenw10
                          e7b2e762-1976-4d2c-8115-792026fc494f-image.png

                          Although I managed to find a spot to put the switch, unfortunately putting a switch in front didn't help :(

                          J 1 Reply Last reply Reply Quote 0
                          • J
                            jrutley @jrutley
                            last edited by

                            no loss when pinging only within the LAN

                            no loss when pinging the WAN IP from local network

                            J 1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Hmm, try installing the MTR package. See if you can easily see where that packet loss is happening.

                              Is there anything fundamentally different with the TPLink router that doesn't show loss. Different WAN link rate for example?

                              1 Reply Last reply Reply Quote 0
                              • S
                                SteveITS Galactic Empire @jrutley
                                last edited by

                                @jrutley Not seeing above that you tried different patch cables…?

                                Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                Upvote 👍 helpful posts!

                                1 Reply Last reply Reply Quote 0
                                • J
                                  jrutley @jrutley
                                  last edited by

                                  I can definitely try installing packages to help diagnose the issue.

                                  And Steve, thanks for the suggestion, but multiple cables were used :)
                                  I just hadn't mentioned that

                                  J 1 Reply Last reply Reply Quote 0
                                  • J
                                    jrutley @jrutley
                                    last edited by

                                    I hate to say this, but it looks like I just had really bad luck.

                                    Last night I switched back to my old router, and the speeds didn't improve. I have since run mtr with and without the new router, and the loss % across the different hops is very similar for both.

                                    Maybe I should restore the TP-Link, put this box behind a second NAT, and try some file transfers across it just to be 100% sure, but I have a feeling that there's nothing wrong with this box, and that my internet connection decided to take a dump at the wrong time.

                                    Sorry for wasting everyone's time on this one 😰

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Ha, well that's a good outcome compared with some obscure hardware incompatibility. 😉

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.