Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Traced down why connections are being refused under heavy load but how to fix?

    Scheduled Pinned Locked Moved General pfSense Questions
    16 Posts 5 Posters 8.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eri--
      last edited by

      sysctl net.inet.tcp.sack.enable=0 try this command. Does it fix your issues?

      1 Reply Last reply Reply Quote 0
      • G
        GoldServe
        last edited by

        I think it does help a little with the problem but sites are still not loading up completely. Are small packets like css info and other things like that getting dropped?

        I see the following:

        1 Reply Last reply Reply Quote 0
        • G
          GoldServe
          last edited by

          This is driving me crazy. I'm surprised no one else has seen this…

          
22:42:08.262828 IP tge.local.4333 > dav.bay0.hotmail.com.http: . ack 245002870 win 32850 <nop,nop,timestamp 0="" 2532586="">
22:42:08.263325 IP tge.local.4333 > dav.bay0.hotmail.com.http: P 0:945(945) ack 1 win 32850 <nop,nop,timestamp 0="" 2532587="">
22:42:08.291585 IP tge.local.4333 > dav.bay0.hotmail.com.http: . ack 531 win 32783 <nop,nop,timestamp 2532587="" 25602801="">
22:42:08.291808 IP tge.local.4333 > dav.bay0.hotmail.com.http: F 945:945(0) ack 531 win 32783 <nop,nop,timestamp 2532587="" 25602801="">
22:42:08.544856 IP tge.local.4334 > dav.bay0.hotmail.com.http: . ack 758041664 win 32850 <nop,nop,timestamp 0="" 2532589="">
22:42:08.545159 IP tge.local.4334 > dav.bay0.hotmail.com.http: P 0:888(888) ack 1 win 32850 <nop,nop,timestamp 0="" 2532589="">
22:42:08.545378 IP tge.local.4334 > dav.bay0.hotmail.com.http: P 888:1245(357) ack 1 win 32850 <nop,nop,timestamp 0="" 2532589="">
22:42:08.599983 IP tge.local.4334 > dav.bay0.hotmail.com.http: . ack 688 win 32764 <nop,nop,timestamp 2532590="" 30286348="">
22:42:08.600747 IP tge.local.4334 > dav.bay0.hotmail.com.http: F 1245:1245(0) ack 688 win 32764 <nop,nop,timestamp 2532590="" 30286348="">
22:42:08.735461 IP tge.local.4335 > oe.bay116.hotmail.com.http: . ack 1840551811 win 32850 <nop,nop,timestamp 2532591="" 1831009190="">
22:42:08.735834 IP tge.local.4335 > oe.bay116.hotmail.com.http: P 0:609(609) ack 1 win 32850 <nop,nop,timestamp 2532591="" 1831009190="">
22:42:08.753764 IP tge.local.4335 > oe.bay116.hotmail.com.http: . ack 526 win 32784 <nop,nop,timestamp 2532591="" 1831009208="">
22:42:08.755008 IP tge.local.4335 > oe.bay116.hotmail.com.http: F 609:609(0) ack 526 win 32784 <nop,nop,timestamp 2532591="" 1831009208="">
22:42:08.892910 IP tge.local.4336 > oe.bay116.hotmail.com.http: . ack 2682583880 win 32850 <nop,nop,timestamp 2532593="" 1831009346="">
22:42:08.893262 IP tge.local.4336 > oe.bay116.hotmail.com.http: P 0:609(609) ack 1 win 32850 <nop,nop,timestamp 2532593="" 1831009346="">
22:42:08.915704 IP tge.local.4336 > oe.bay116.hotmail.com.http: . ack 525 win 32784 <nop,nop,timestamp 2532593="" 1831009368="">
22:42:08.916222 IP tge.local.4336 > oe.bay116.hotmail.com.http: F 609:609(0) ack 525 win 32784 <nop,nop,timestamp 2532593="" 1831009368="">
22:42:08.999397 IP tge.local.4337 > oe.bay116.hotmail.com.http: . ack 3847159758 win 32850 <nop,nop,timestamp 2532594="" 1831009454="">
22:42:08.999724 IP tge.local.4337 > oe.bay116.hotmail.com.http: P 0:921(921) ack 1 win 32850 <nop,nop,timestamp 2532594="" 1831009454="">
22:42:09.065854 IP tge.local.4337 > oe.bay116.hotmail.com.http: . ack 817 win 32748 <nop,nop,timestamp 2532594="" 1831009520="">
22:42:09.066898 IP tge.local.4337 > oe.bay116.hotmail.com.http: F 921:921(0) ack 817 win 32748 <nop,nop,timestamp 2532594="" 1831009520="">
22:42:09.122647 IP tge.local.4338 > 65.54.165.135.http: . ack 3734449601 win 32850 <nop,nop,timestamp 0="" 2532595="">
22:42:09.123039 IP tge.local.4338 > 65.54.165.135.http: P 0:739(739) ack 1 win 32850 <nop,nop,timestamp 0="" 2532595="">
22:42:09.144404 IP tge.local.4338 > 65.54.165.135.http: . ack 399 win 32800 <nop,nop,timestamp 2532595="" 18288140="">
22:42:09.145203 IP tge.local.4338 > 65.54.165.135.http: F 739:739(0) ack 399 win 32800 <nop,nop,timestamp 2532595="" 18288140="">
22:42:09.256942 IP tge.local.4339 > 65.54.165.135.http: . ack 4047933809 win 32850 <nop,nop,timestamp 0="" 2532596="">
22:42:09.257542 IP tge.local.4339 > 65.54.165.135.http: P 0:739(739) ack 1 win 32850 <nop,nop,timestamp 0="" 2532596="">
22:42:09.280202 IP tge.local.4339 > 65.54.165.135.http: . ack 399 win 32800 <nop,nop,timestamp 2532597="" 18403105="">
22:42:09.280819 IP tge.local.4339 > 65.54.165.135.http: F 739:739(0) ack 399 win 32800 <nop,nop,timestamp 2532597="" 18403105="">
22:42:09.390902 IP tge.local.4340 > 65.54.165.135.http: . ack 744914266 win 32850 <nop,nop,timestamp 0="" 2532598="">
22:42:09.391220 IP tge.local.4340 > 65.54.165.135.http: P 0:686(686) ack 1 win 32850 <nop,nop,timestamp 0="" 2532598="">
22:42:09.391486 IP tge.local.4340 > 65.54.165.135.http: P 686:1043(357) ack 1 win 32850 <nop,nop,timestamp 0="" 2532598="">
22:42:09.429431 IP tge.local.4340 > 65.54.165.135.http: . ack 648 win 32769 <nop,nop,timestamp 2532598="" 18288302="">
22:42:09.429641 IP tge.local.4340 > 65.54.165.135.http: . ack 649 win 32769 <nop,nop,timestamp 2532598="" 18288302="">
22:42:09.430063 IP tge.local.4340 > 65.54.165.135.http: F 1043:1043(0) ack 649 win 32769 <nop,nop,timestamp 2532598="" 18288302="">
22:42:10.722846 IP tge.local.4341 > oe.bay116.hotmail.com.http: . ack 3305645792 win 32850 <nop,nop,timestamp 2532611="" 1831011176="">
22:42:10.723298 IP tge.local.4341 > oe.bay116.hotmail.com.http: P 0:970(970) ack 1 win 32850 <nop,nop,timestamp 2532611="" 1831011176="">
22:42:10.723486 IP tge.local.4341 > oe.bay116.hotmail.com.http: P 970:1327(357) ack 1 win 32850 <nop,nop,timestamp 2532611="" 1831011176="">
22:42:10.964700 IP tge.local.4341 > oe.bay116.hotmail.com.http: . ack 2253 win 32850 <nop,nop,timestamp 2532613="" 1831011416="">
22:42:10.964912 IP tge.local.4341 > oe.bay116.hotmail.com.http: . ack 3636 win 32677 <nop,nop,timestamp 2532613="" 1831011416="">
22:42:10.965083 IP tge.local.4341 > oe.bay116.hotmail.com.http: . ack 3637 win 32677 <nop,nop,timestamp 2532613="" 1831011416="">
22:42:10.966292 IP tge.local.4341 > oe.bay116.hotmail.com.http: F 1327:1327(0) ack 3637 win 32677 <nop,nop,timestamp 2532613="" 183101141<br=""></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp></nop,nop,timestamp>
          1 Reply Last reply Reply Quote 0
          • G
            GoldServe
            last edited by

            Sorry, disabling the sack did not help. Can someone please look at my status.php and see if there is something wrong with all the traffic coming into my box?

            http://www.pastebin.ca/984481

            Many thanks!

            1 Reply Last reply Reply Quote 0
            • H
              hoba
              last edited by

              Only had a quick look but why do you have so many arp errors?

              …

              arpresolve: can't allocate route for 24.130.144.1

              arplookup 24.130.144.1 failed: host is not on local network

              arpresolve: can't allocate route for 24.130.144.1

              arplookup 24.130.144.1 failed: host is not on local network

              arpresolve: can't allocate route for 24.130.144.1

              arplookup 24.130.144.1 failed: host is not on local network

              arpresolve: can't allocate route for 24.130.144.1

              arplookup 24.130.144.1 failed: host is not on local network

              arpresolve: can't allocate route for 24.130.144.1

              vr0: link state changed to DOWN

              vr0: link state changed to UP

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1

              arpresolve: can't allocate route for 76.126.216.1
              ....

              1 Reply Last reply Reply Quote 0
              • G
                GoldServe
                last edited by

                I have dual wan and sometimes the cable modem changes IP once every few months and my lan rule to route all hosts on the same subnet is slightly incorrect. Fixed now. When I don't torrent, everything is fine and dandy. Anyone see any glaring statistics when i'm torrenting?

                1 Reply Last reply Reply Quote 0
                • J
                  jabns
                  last edited by

                  I have the same problem.

                  I have two 18mbit(down) 2.5mbit(up) links and it seems to happen when i am seeding torrents.

                  I will leave ubuntu seeding when i am at work today and see if it happens.

                  James

                  1 Reply Last reply Reply Quote 0
                  • H
                    hoba
                    last edited by

                    System>advanced: Bump up the maximum firewallstates value. You also can monitor states either at status>system or by viewing the corresponding states rrd graph (status>rrdgraphs). Maybe you are running just out of states.

                    1 Reply Last reply Reply Quote 0
                    • G
                      GoldServe
                      last edited by

                      Thanks for your suggestion but that is the first thing I did:

                      LIMITS:

                      states    hard limit 100000

                      src-nodes  hard limit  10000

                      frags      hard limit  5000

                      100,000 states is enough when I reach around 4-5K only.

                      1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan
                        last edited by

                        You guys mentioned the word "torrents".

                        My question : are you sure that some one isn't filtering upstream ??
                        Some kind of QOS system used by your ISP ?

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        1 Reply Last reply Reply Quote 0
                        • G
                          GoldServe
                          last edited by

                          I can't confirm 100% but on my wrt54g modded with tomato firmware, I can run for a long time and my connection doesn't slow down.

                          Also how I know it is not the ISP problem and it is the pfsense box because getting internally to 192.168.1.1 is a big problem too. Connections are reset, refresh 15 times and 1 time the page will load half.

                          Sigh

                          1 Reply Last reply Reply Quote 0
                          • GertjanG
                            Gertjan
                            last edited by

                            @GoldServe:

                            I can't confirm 100% but on my wrt54g modded with tomato firmware, …

                            Just forget about my question. If another router works, then no ISP troubles.

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            1 Reply Last reply Reply Quote 0
                            • G
                              GoldServe
                              last edited by

                              No ideas still?

                              1 Reply Last reply Reply Quote 0
                              • G
                                GoldServe
                                last edited by

                                I can't believe I was so dumb. It is NOT PFSENSE and it was my windows xp sp2 causing it. I thought I had cracked the tcpip.sys to allow more than 10 syn connections but I guess I didn't. It was XP causing the problems and when I boosted the number of connections to 50, i'm all fine (crosses fingers)

                                THANKS!

                                1 Reply Last reply Reply Quote 0
                                • H
                                  hoba
                                  last edited by

                                  I never thought it was a good idea from microsoft to set such a low limit  :P

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.