Webgui access from WAN is too slow

steveh

yep confirmed its tso thats causing the issue on 1.2.1-RC1 built on Thu Sep 25 11:47:42 EDT 2008
Whats really odd is even though there are pass rules for the packets some are still hitting the default deny when tso is enabled so theres something really quite low level breaking badly.

eri--

The issue reported was not a tso problem but it i fixed it and should not be a problem anymore.

The tso/rxsum/txsum or later offloadings that will come in later 10Gbps drivers even work or don't so there is no middle way with them.
I guess FreeBSD-release 7.1 has some more corrections on this side but for now recommended is that:
if you face problems disable it.

ipv2

When is issue is fixed? I've tested last week with the daily snapshot but still have the same problems.

Thanks

TheT

Hello,

I have the same problem with slowness in accessing webgui @ WAN. I created proxy connection into a server on the same switch as pfsense in order to be able to manage pfsense remotely.

Can we have this issue fixed soon? I applied snapshot on 092708 and still the same problem.

Regards,

TheT

eri--

Can you please describe the problems you have more throughly.

What type of WAN connection do you have, etc…?

TheT

Here is my setup:

All ports are Intel Nic: 1gig

ISP <-> Switch / Foundry <-> WAN PFsense (Dell server with 2 intel nics) (LAN) <-> Switch <-> Servers1…N
|
ServerA

From ServerA I can access Pfsense webgui w/o any problem. The connection at ISP is 1Gig

From a computer at home using comcast and/or att - (DSL) - Connection to web gui at pfsense is very slow and not usable.

Regards,

TheT

eri--

This seems like a tcp mss problem probably it is at your end unless you have some kind of pppoe/pptp connection on the pfSense at work.
Another test would be to move the gui of pfSense to another port and try.

ipv2

Hi, My config is the same as the one of THeT, ISP -> pfsense wan, switch, server. from our office to the wan it's just to slow (more than a minute just to load one page) when I connect to the LAN (via a ssh tunnel from a server on the LAN it's fast as normal.
I've already tried another port for the WAN (from the onboard Intel to a port on the quad GE Intel card. problem just moves to the new port.

I was also thinking of some mss issue (see my earlier posts) but not able to figure out what the problem is exactly.

If you like to login to our system for some testing this is fine, it's not in production just in test (because of the slow WAN).

Juve

I did a ifconfig em0 -tso and everything is working as it should now.

TheT

Is the WAN interface slowness fixed in the lastest build?