Interface Speed Issues - [SOLVED]

Wasca

Hi Guys

I'm getting really really slow traffic to my webgui over the WAN interface and any inbound web traffic to my servers on the DMZ interface is also really slow. I think it's an error with my interface config and was hoping someone could look at it.

ALL my interface are connected to Gigabit ports but I've noticed these lines in my config.

The config I'm using was carried over from a previous router install so I'm wondering if they came from that.

In my old config I had hard coded the the WAN interface to be 100Mbit Full Duplex to suit what my provider was supplying. Here is the interfaces config of the problem router. (sanitized)

	 <interfaces><wan><if>em3</if>
			 <blockpriv><media>autoselect</media>
			<bandwidth>100</bandwidth>
			<bandwidthtype>Mb</bandwidthtype>
			 <enable><ipaddr>180.xxx.xxx.xxx</ipaddr>
			<subnet>30</subnet>
			<gateway>WANGW</gateway>
			 <blockbogons><spoofmac></spoofmac></blockbogons></enable></blockpriv></wan> 
		 <lan><if>em0_vlan1</if>
			<bandwidth>100</bandwidth>
			<bandwidthtype>Mb</bandwidthtype>
			 <bridge><disableftpproxy><enable><spoofmac><ipaddr>192.168.1.1</ipaddr>
			<subnet>24</subnet></spoofmac></enable></disableftpproxy></bridge></lan> 
		 <opt2><if>em1</if>

			 <bridge><spoofmac><enable><ipaddr>180.xxx.xxx.xxx</ipaddr>
			<subnet>28</subnet></enable></spoofmac></bridge></opt2> 
		 <opt3><if>em0_vlan3</if>

			 <bridge><spoofmac><disableftpproxy><enable><ipaddr>192.168.5.1</ipaddr>
			<subnet>24</subnet></enable></disableftpproxy></spoofmac></bridge></opt3></interfaces>

em3 and em0_vlan1 are on 1Gigbit ports set as auto select in the switch, could the <bandwidth>100</bandwidth> entries in the config be causing the problems I'm seeing?

If they are the reason can I safely remove those lines from config and then re-upload the config to the server and do a reboot? I just want to make sure <bandwidth>100</bandwidth> & <bandwidthtype>Mb</bandwidthtype> are not needed.

Thanks
Wasca

Wasca

So can anyone tell me if <bandwidth>100</bandwidth> & <bandwidthtype>Mb</bandwidthtype> is needed in the interface config if <media>autoselect</media> is autoselect?

Is it safe to remove these items from the config and re-upload the config then reboot?

Thanks

Wasca

stephenw10

You should not normally have those lines. My own em interfaces config:


		 <lan><if>em0</if>
			 <media><mediaopt><spoofmac><enable><ipaddr>192.168.1.1</ipaddr>
			<subnet>24</subnet></enable></spoofmac></mediaopt></media></lan>

If should be safe to remove them but you are always open to typo errors etc so backup first and make sure you a strategy for recovering if it all goes horribly wrong. ;)

Steve

cmb

Whether those are there depends on when you started your config, they used to exist for purposes of the traffic shaper quite some time ago, but have been ignored for the last several versions. No harm in having it there, it doesn't do anything, but you can remove it too if you want.

stephenw10

Ah, that explains it. I was thinking those options should be under <mediaopt>. Thanks Chris.
Well that probably won't help then Wasca. ;)

Steve</mediaopt>

Wasca

Hi Guys

I finally got a resolution to my horrendous webgui speeds and web traffic through my pfsense router. It turns out our WAN was connected to a dodgy piece of Cisco hardware (Line Card) and it was causing all sorts of problems foe specific traffic from Windows machines only! Here is the explanation I got form our provider.

_We believe we have hit a bug with the particular hardware revision that card is. It drops packets of certain sizes which matches up with that we were seeing with duplicate acks and retransmits that looked like they weren't being acknowledged. I am going to have to look further into why Windows appeared to be affect but other operating systems we tested weren't.

The second line card in our colo router is a newer revision which doesn't suffer from the bug._

This report came just before I was about to do a full reinstall of our router thinking there was some major problem with pfsense. Pheeeew bullet dodged.