Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense maximum throughput

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 4 Posters 5.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H Offline
      Harvy66
      last edited by

      @stephenw10:

      Hmm, so you're saying the test ran for a minute but was only sending traffic for the first 10 seconds?  :-
      That's not normally how iperf functions. Running the test longer simply gives you more data to avarage across so you are less likely to see glitches. However I see you have a long command line string so maybe you're using something I don't. In fact I see it's reporting a '1 minute average' so that makes sense. Seems odd that it would do that when the test is less than 1min though.

      Steve

      Sorry, I was using the PPS RRD graph, which shows in 1min averages. I have not noticed a PPS real-time graph in PFSense, so the average is the best I had.

      As for why I did a short test, I didn't notice the "-t" flag that someone so graciously pointed out :

      1 Reply Last reply Reply Quote 0
      • stephenw10S Offline
        stephenw10 Netgate Administrator
        last edited by

        @Harvy66:

        Sorry, I was using the PPS RRD graph

        Ah, that explains my confusion.  ;)
        Anyway, 940Mbps, looks like you've got some strong numbers there.

        Steve

        1 Reply Last reply Reply Quote 0
        • ? This user is from outside of this forum
          Guest
          last edited by

          iperf measure overall performance.  i want to find a solution to measure throughput for specific package in pfsense, like dansguardian, firewalling, snort, … .

          1 Reply Last reply Reply Quote 0
          • P Offline
            podilarius
            last edited by

            snort and other programs are usually based on state openings. To me the best way to test is with a BitTorrent of your favorite Linux distro, or several all at the same time.

            1 Reply Last reply Reply Quote 0
            • ? This user is from outside of this forum
              Guest
              last edited by

              Dear podilarius,
              I need to create torrent files with default tracker URI and seed them from server side.  then i should open torrent files in client side. average of "Down Speed" is my throughput.
              Am i right?

              1 Reply Last reply Reply Quote 0
              • P Offline
                podilarius
                last edited by

                If they are running concurrently add the averages. Otherwise yes, just average out the connections. This really will test snort. To test dansguardian, you would need to have an html spider doing out and hitting lots of different sites. Again, average or add the averages.

                1 Reply Last reply Reply Quote 0
                • ? This user is from outside of this forum
                  Guest
                  last edited by

                  thanks a lot,
                  What about firewalling? is bittorent a good choice with a pass rule?
                  I want to measure maximum users(Concurrent Sessions) and new sessions per second too.
                  do you know a tool for this purpose?

                  1 Reply Last reply Reply Quote 0
                  • P Offline
                    podilarius
                    last edited by

                    Try Google. look for a firewall test program or suite. There might be a free one. Please let us know what you found, used, and the results. I don't have a strong enough connection to test the limits of my hardware.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S Offline
                      stephenw10 Netgate Administrator
                      last edited by

                      Concurrent sessions is where pfSense really stands out as a firewall device. Just add more RAM if you need more. Have a look at this thread to see what can be acheived. I have no idea what you might test it with though.
                      https://forum.pfsense.org/index.php?topic=72810.0

                      Steve

                      1 Reply Last reply Reply Quote 0
                      • ? This user is from outside of this forum
                        Guest
                        last edited by

                        There isn't any free network firewall test program that can measure firewall throughput and max. concurrent sessions. Commercial products are spirent avalanche and breakingpoint firestorm.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S Offline
                          stephenw10 Netgate Administrator
                          last edited by

                          http://curl-loader.sourceforge.net/ ?

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • ? This user is from outside of this forum
                            Guest
                            last edited by

                            Great software!
                            Thank you very much Steve

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.