Network becomes totally unusable when my parents connect

stephenw10

Either way could affect it.

But the first thing to do is set the monitoring IP to something remote. The gateway could just be deprioritising ping replies.

https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html

johnpoz

@RickyBaker well normally the upload would be what would kill the latency to your gateway..

I would look to see how much traffic your sending in pfsense traffic graphs.. I would think your connection would have to be just utterly pegged to cause that kind of latency.

You're on fiber - normally those response times from your ISPs are way way low - like few ms only so seeing plus 500ms is insane. And normally fiber has nice fat pipe, like gig/gig - while I am stuck on shitty cable with 500/50 --

And this only happens when your parents device(s) connect? What is your normal latency show when network is working normal.. You can look in monitoring for that.

Or should show just on your gateway widget..

Example I currently have like 6 people streaming off my plex, on my 50Mbps up connection using like 40Mbps or so, etc.. And it put a hurt on my normally 10-12ms ping times to my gateway

edit: and yeah Steve is right you should see if its just your gateway being shitty and not answering you very fast - you could try some other IP on the internet, say 8.8.8.8 for example if your connection is not saturated.

michmoor

@johnpoz said in Network becomes totally unusable when my parents connect:

o

That 4680 is still going strong....

johnpoz

@michmoor so your not seeing any real traffic on your wan in either direction, and your still seeing 500ms logs... Or currently your not seeing those events?

Yeah 4860 - great box! rocks for anything would ever need with my 500/50 connection that is for damn sure.. Wish I could put it through its paces with gig/gig ;) but just no option for me available. It never really even breaks a sweat for me..

michmoor

@johnpoz said in Network becomes totally unusable when my parents connect:

@michmoor so your not seeing any real traffic on your wan in either direction, and your still seeing 500ms logs... Or currently your not seeing those events?

Yeah 4860 - great box! rocks for anything would ever need with my 500/50 connection that is for damn sure.. Wish I could put it through its paces with gig/gig ;) but just no option for me available. It never really even breaks a sweat for me..

Didn’t mean to taint the thread. Your question is to the OP.

But yeah that 4680 is an amazing little device. How long have you had it?
As an aside I got a 1100 at my mom’s place and that’s just so impressive. No fuss. Handles 300/25Mbps with easiness

johnpoz

@michmoor its getting a bit long in the tooth.. Sometime round end of 2017, early 2018..

edit: found this old post, pictures must of gotten lost in one of the previous forum updates, but here is post when I got it

https://forum.netgate.com/post/740935

So would been right around 12/13/2017 ;)

RickyBaker

@stephenw10
Changed the Monitoring ip to the google name servers, I see this in the log and no more alarms but maybe it just hasn't tested it yet? or maybe it just hasn't failed yet

I pulled up that Gateways widget an when it first loaded I had a big red warning about the gateway but that changed to Online pretty quick. I'm gonna let the monitoring IP stay 8.8.8.8 for a little bit to see what's up but then i'll change it back and see what we got

@johnpoz said in Network becomes totally unusable when my parents connect:

Mine flux between say 10-12ms

I didn't know how to add that graph, any tips would be appreciated.

On another front I called AT&T and just complained and they are sending me a new router tomorrow, as mine was 5+ years old and they seemed unwilling to troubleshoot with me until it's replaced....

johnpoz

@RickyBaker had you just changed it when you took that widget screenshot - because 50ms with a SD of 140ms is insane to google

Which graph - monitoring, just pick the stuff you want to see.. for traffic just go to traffic graph - both under status tab.

RickyBaker

@johnpoz the one in this post: https://forum.netgate.com/post/1212585

i'll explore the status tab further, I was thinking it was a widget you add to the homepage

Possible non-sequitur but i ran across this post as I was trying to google how best to set up my new ATT modem/ONT (BGW320-500)
https://docs.netgate.com/pfsense/en/latest/recipes/authbridge.html

and I remember this! when i first set up my router, but eventually had an IT guy from my work set it up for me. The top 2 use-cases it mentions are:

Modem Memory Limitations
The fiber modem may still track states even in IP-Passthrough mode. Some modems have a hard limit on the number of states that they can handle at a time, becoming unstable under significant load.

Limitations in IPv6 Implementation
In IP-Passthrough mode the modem is usually provisioned with an IPv6 prefix (/60 for AT&T, for example), but will only hand out a single /64 prefix out of the larger allocation via DHCP-PD to the firewall. This means that only a single LAN on the firewall can be provisioned with IPv6 by default. It is possible to request multiple /64 networks out of the IPv6 prefix block, but that is an ugly workaround.

Both of these seem like they could manifest as the weird IP6/DNS ghosts I was/am experiencing. I also noticed that my Current Modem isn't in IP Passthrough mode, which I simply don't understand. I remember earlier in this tread i couldn't understand why Track Interface selection under IPv7 Configuration Type of the LAN. It HAD to come from this....

Also should be noted that despite this supposed to be to remove the Modem from the loop, my modem was very much attached.

RickyBaker

@RickyBaker I think it was the modem!!!

I'm not convinced this isn't just temporary. Some of the settings of the Modem seem wrong. for one passthrough didn't seem to work and DHCP is enabled on the router. I'd like to enable the protocol in that link i posted above (https://docs.netgate.com/pfsense/en/latest/recipes/authbridge.html) but for the time being i'm happy to have snappy internet back! Thanks everyone!

This seems......ok? not sure what I should expect over wifi with gigabit fiber:

It's def faster than it was though...