Massive performance issues on some websites
-
Seems you have DNS issues.
I will recommend you edit your /etc/resolv.conf and add your DNS server in the first line:nameserver 10.0.0.1Do not use unbound for DNS.
If you don't have a local DNS server, use one that's near you, or google's 8.8.4.4 -
Seems you have DNS issues.
I will recommend you edit your /etc/resolv.conf and add your DNS server in the first line:nameserver 10.0.0.1Do not use unbound for DNS.
If you don't have a local DNS server, use one that's near you, or google's 8.8.4.4Definitely not a DNS issue. Our internal network references an internal DNS which is setup with forwarders to our ISP and OpenDNS so that wouldn’t stop machines internally from connecting. Because of the auto update issue I double checked the DNS settings in pfSense and they are configured correctly (To OpenDNS via WAN gateway), just in case pfSense didn’t update its host OS I checked the resolv.conf and it’s applied correctly there too (127.0.0.1 followed by the 2 OpenDNS servers).
-
I'm out of my lane but those who know will want to know what packages you're running (snort, squid, squidguard, havp, etc.)
-
I'm out of my lane but those who know will want to know what packages you're running (snort, squid, squidguard, havp, etc.)
Only Snort and Open VM Tools
-
Only snort huh?
-
Disable Snort and report back
-
-
Leave it on one at a time….
-
Disable Snort and report back
That was one of the first things I tried. Mentioned that in my OP
Leave it on one at a time….
I'm not sure what you mean by that?
-
I agree with super mule - Turning of snort has occasionally been known to help performance - From time to time.
The same way not being DDOSed helps with performance….You said you are running two packages.
I think supermule meant try disabling one, and then the other separately to see which is causing the problem. -
I agree with super mule - Turning of snort has occasionally been known to help performance - From time to time.
The same way not being DDOSed helps with performance….I've tried with Snort enabled (When I first tried to switch over to pfSense) and then with it disabled to try and narrow down the cause of the issues I'm having.
Considering it's a fresh install with minimal packages added I'm a bit stumped as to why these issues are occurring, and even more stumped that I can't see anything being blocked or high use in any resources >:( -
Pfsense works well and works fast. Its either a package, a misconfiguration, your DNS or something like that that is causing your problems.
What are you using for DNS? Can we see the list that appears on the main page to the left?
-
Pfsense works well and works fast. Its either a package, a misconfiguration, your DNS or something like that that is causing your problems.
What are you using for DNS? Can we see the list that appears on the main page to the left?
As mentioned previously, it is 127.0.0.1 followed by the two OpenDNS servers.
Here is a screenshot that shows details I have already given.
-
Try changing DNS to 8.8.8.8 and 8.8.4.4 just for a little while and reboot.
See if it helps.
If thats not the issue, can we see your lan and wan firewall rules?
"unable to check for updates" seems like something very basic is broken.
-
Why are you unable to check for updates??
-
Try changing DNS to 8.8.8.8 and 8.8.4.4 just for a little while and reboot.
See if it helps.
If thats not the issue, can we see your lan and wan firewall rules?
"unable to check for updates" seems like something very basic is broken.
100% sure that won't help. We've used OpenDNS for years without an issue and it works fine in Endian.
Not to mention that internally the DNS saved in the firewall isn't even used as we use our own internal DNS server. -
Why are you unable to check for updates??
I'm not sure. If I copy and paste the update link from the failure message it loads on my PC fine and the package list updates on pfSense fine so I'm still really dumbfounded.
Offtopic: Slightly jealous of your speed there :-\ Management won't spend more on a faster link (Currently 10mb) and home internet is worse :(
-
Please just try google DNS just to placate my silly whims.
-
Pls. try Google DNS to see if the issue persits…
Why are you unable to check for updates??
I'm not sure. If I copy and paste the update link from the failure message it loads on my PC fine and the package list updates on pfSense fine so I'm still really dumbfounded.
Offtopic: Slightly jealous of your speed there :-\ Management won't spend more on a faster link (Currently 10mb) and home internet is worse :(
-
Same issue with Google DNS.
