Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.3 firewall tab -rules slow

    Scheduled Pinned Locked Moved 2.3-RC Snapshot Feedback and Issues - ARCHIVED
    48 Posts 8 Posters 13.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      Wouldn't do me any good, but Steve_B may want to see it!

      Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • M
        maverick_slo
        last edited by

        Steve? :)

        BTW, I removed aliases (1 alias with 8 IPs in it) and was the same…

        1 Reply Last reply Reply Quote 0
        • S
          Steve_B Netgate
          last edited by

          By placing a print(microtime()); at about line 256, and another after the final include("foot.inc", I can see exactly when the PHP stars/finishes loading the page. I see something like:

          0.39483700 1453836509
          0.40212300 1453836509

          So about 100 mS

          Running the Firebug profiler, I see nothing suspicious in the Javascript so far.

          I am using Firefox 44 on a 2015 MB Pro

          Als ik kan

          1 Reply Last reply Reply Quote 0
          • M
            maverick_slo
            last edited by

            And this is what I see on Firefox 44, Win10

            Page loads/renders 7-9 seconds…

            rules4.JPG
            rules4.JPG_thumb

            1 Reply Last reply Reply Quote 0
            • S
              Steve_B Netgate
              last edited by

              Can you expand DOM.event handler please?

              Als ik kan

              1 Reply Last reply Reply Quote 0
              • M
                maverick_slo
                last edited by

                Sure.

                Reallllly long picture :)

                rules5.JPG
                rules5.JPG_thumb

                1 Reply Last reply Reply Quote 0
                • S
                  Steve_B Netgate
                  last edited by

                  Perfect. Thanks.

                  So now we know it is spending all that time recalculating the style of something or other!

                  Would you experiment with the different CSS files please and see if that has any effect?

                  System->General setup->Theme

                  Being of a light and sunny disposition, I prefer pfense-Beta, but perhaps you use something else.

                  Als ik kan

                  1 Reply Last reply Reply Quote 0
                  • M
                    maverick_slo
                    last edited by

                    I already tried it and no luck.
                    Tried all 3 of them.
                    Interesting sidenote…
                    Chrome on android 6 displays it in 2 seconds.
                    I think my computers have something in common will investigate that too...

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo
                      last edited by

                      Removed antivirus same thing.
                      I don`t get it anymore :)

                      1 Reply Last reply Reply Quote 0
                      • M
                        maverick_slo
                        last edited by

                        I literally clicked through ALL pages and only this one is superslow.
                        NAT for example is very fast and it has lots of entries.

                        1 Reply Last reply Reply Quote 0
                        • S
                          Steve_B Netgate
                          last edited by

                          Nor me. I have 25 rules and the page loads in 380 mS according to the Chrome profiler.

                          Tough without being able to reproduce it.

                          Als ik kan

                          1 Reply Last reply Reply Quote 0
                          • M
                            maverick_slo
                            last edited by

                            Maybe is this specific issue limited only to my firewall…
                            I did upgrade a lot from 2.X to every version until today...

                            1 Reply Last reply Reply Quote 0
                            • M
                              maverick_slo
                              last edited by

                              In latest tests on fresh win 10 only firefox is problematic, ie, chrome, opera all load page in less than 2 seconds only firefox takes 8 :S

                              1 Reply Last reply Reply Quote 0
                              • I
                                iamzam
                                last edited by

                                FWIW I also have the slowness problem in Firefox (Currently 44.0) and not in Chrome/Safari. For me it takes about 16 seconds total for the main WAN rules to finish the first time.Ā  I have the Firefox Web Developer Performance Profiler (Shift F5) .json export that you can import into your Firefox and see for every line where it spent the time but it is 1.8 MB and .json files won't attach here.Ā  For instance one of the most plentiful entries is "Recalculate Style" and if you select it, over on the sidebar you see the files it was processing such as pfsense.js:187

                                Here is a screenshot of that:

                                Performance-Firewall-Rules-WAN.png
                                Performance-Firewall-Rules-WAN.png_thumb

                                1 Reply Last reply Reply Quote 0
                                • M
                                  maverick_slo
                                  last edited by

                                  Yeah we have same problem :)

                                  1 Reply Last reply Reply Quote 0
                                  • S
                                    Steve_B Netgate
                                    last edited by

                                    We have tried everything we can to reproduce this, but no luck so far. Were I able to reproduce it, I would probably troubleshoot like this:

                                    From the command line, or from Diagnostics->Command prompt, create an empty CSS file:

                                    touch /usr/local/www/bootstrap/css/empty.css

                                    Now from the System->General setup page, change the web configurator theme to "empty" and save.

                                    The screen will now look horrible, but it will still be functional. You wont have a menu any more, but you will have links you can click on, so click firewall_rules. Does the page load more quickly? Much more quickly?

                                    If it is improved, I would go back to the pfSense theme (have to click the general setup link), copy the pfSense theme:

                                    cp /usr/local/www/bootstrap/css/pfSense.cssĀ  /usr/local/www/bootstrap/css/pfSense-TEST.css

                                    now select that pfSense-TEST theme from the setup page. You can now start commenting out sections of the pfSense-TEST.css file to try and locate the culprit. Probably best to start commenting out from the bottom up :)

                                    I'm not asking anyone to do this or even suggesting that it is a good idea, but it is about all I can think of at this point.

                                    Als ik kan

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      maverick_slo
                                      last edited by

                                      Ok I will do it if you already ask for it :)

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        maverick_slo
                                        last edited by

                                        BTW, if we nail it, you owe me a bear,Ā  lol :)

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          maverick_slo
                                          last edited by

                                          Funny…

                                          I just did it, page loads exactly the same amount of time.

                                          nocss.PNG
                                          nocss.PNG_thumb

                                          1 Reply Last reply Reply Quote 0
                                          • S
                                            Steve_B Netgate
                                            last edited by

                                            OK good. So we know it is not related to the pfSense CSS then.

                                            Thanks for taking the time to do that.

                                            I'll suggest the next step shortly.

                                            Als ik kan

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.