Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Massive performance issues on some websites

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    27 Posts 6 Posters 6.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      justin.j
      last edited by

      @Derelict:

      I'm out of my lane but those who know will want to know what packages you're running (snort, squid, squidguard, havp, etc.)

      Only Snort and Open VM Tools

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        Only snort huh?

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          Disable Snort and report back

          1 Reply Last reply Reply Quote 0
          • J
            justin.j
            last edited by

            @kejianshi:

            Only snort huh?

            And Open VM tools.

            packages.png
            packages.png_thumb

            1 Reply Last reply Reply Quote 0
            • S
              Supermule Banned
              last edited by

              Leave it on one at a time….

              1 Reply Last reply Reply Quote 0
              • J
                justin.j
                last edited by

                @Supermule:

                Disable Snort and report back

                That was one of the first things I tried.  Mentioned that in my OP

                @Supermule:

                Leave it on one at a time….

                I'm not sure what you mean by that?

                1 Reply Last reply Reply Quote 0
                • K
                  kejianshi
                  last edited by

                  I agree with super mule - Turning of snort has occasionally been known to help performance - From time to time.
                  The same way not being DDOSed helps with performance….

                  You said you are running two packages.
                  I think supermule meant try disabling one, and then the other separately to see which is causing the problem.

                  1 Reply Last reply Reply Quote 0
                  • J
                    justin.j
                    last edited by

                    @kejianshi:

                    I agree with super mule - Turning of snort has occasionally been known to help performance - From time to time.
                    The same way not being DDOSed helps with performance….

                    I've tried with Snort enabled (When I first tried to switch over to pfSense) and then with it disabled to try and narrow down the cause of the issues I'm having.
                    Considering it's a fresh install with minimal packages added I'm a bit stumped as to why these issues are occurring, and even more stumped that I can't see anything being blocked or high use in any resources >:(

                    1 Reply Last reply Reply Quote 0
                    • K
                      kejianshi
                      last edited by

                      Pfsense works well and works fast.  Its either a package, a misconfiguration, your DNS or something like that that is causing your problems.

                      What are you using for DNS?  Can we see the list that appears on the main page to the left?

                      1 Reply Last reply Reply Quote 0
                      • J
                        justin.j
                        last edited by

                        @kejianshi:

                        Pfsense works well and works fast.  Its either a package, a misconfiguration, your DNS or something like that that is causing your problems.

                        What are you using for DNS?  Can we see the list that appears on the main page to the left?

                        As mentioned previously, it is 127.0.0.1 followed by the two OpenDNS servers.
                        Here is a screenshot that shows details I have already given.

                        General.png
                        General.png_thumb

                        1 Reply Last reply Reply Quote 0
                        • K
                          kejianshi
                          last edited by

                          Try changing DNS to 8.8.8.8 and 8.8.4.4 just for a little while and reboot.

                          See if it helps.

                          If thats not the issue, can we see your lan and wan firewall rules?

                          "unable to check for updates" seems like something very basic is broken.

                          1 Reply Last reply Reply Quote 0
                          • S
                            Supermule Banned
                            last edited by

                            Why are you unable to check for updates??

                            1 Reply Last reply Reply Quote 0
                            • J
                              justin.j
                              last edited by

                              @kejianshi:

                              Try changing DNS to 8.8.8.8 and 8.8.4.4 just for a little while and reboot.

                              See if it helps.

                              If thats not the issue, can we see your lan and wan firewall rules?

                              "unable to check for updates" seems like something very basic is broken.

                              100% sure that won't help.  We've used OpenDNS for years without an issue and it works fine in Endian.
                              Not to mention that internally the DNS saved in the firewall isn't even used as we use our own internal DNS server.

                              1 Reply Last reply Reply Quote 0
                              • J
                                justin.j
                                last edited by

                                @Supermule:

                                Why are you unable to check for updates??

                                I'm not sure.  If I copy and paste the update link from the failure message it loads on my PC fine and the package list updates on pfSense fine so I'm still really dumbfounded.

                                Offtopic:  Slightly jealous of your speed there  :-\  Management won't spend more on a faster link (Currently 10mb) and home internet is worse :(

                                1 Reply Last reply Reply Quote 0
                                • K
                                  kejianshi
                                  last edited by

                                  Please just try google DNS just to placate my silly whims.

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Supermule Banned
                                    last edited by

                                    Pls. try Google DNS to see if the issue persits…

                                    @justin.j:

                                    @Supermule:

                                    Why are you unable to check for updates??

                                    I'm not sure.  If I copy and paste the update link from the failure message it loads on my PC fine and the package list updates on pfSense fine so I'm still really dumbfounded.

                                    Offtopic:  Slightly jealous of your speed there  :-\  Management won't spend more on a faster link (Currently 10mb) and home internet is worse :(

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      justin.j
                                      last edited by

                                      Same issue with Google DNS.

                                      googledns.png
                                      googledns.png_thumb

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        What is your wan IP? Is it public or private?

                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          Supermule Banned
                                          last edited by

                                          We need access to that box because something is wrong.

                                          And I bet thats why its slow. Are you using any specified GW's on any other interface than WAN??

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            kejianshi
                                            last edited by

                                            Yep - But I hate to ask.  People are paranoid you know…

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.