Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Not getting 1 gpbs on new pfSense box

    Scheduled Pinned Locked Moved Hardware
    12 Posts 3 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pfBasic Banned
      last edited by

      What kind of NICs?
      What kind of file(s)?
      What are you transferring the file(s) between?
      What kind of media are the file(s) coming off of and going on to?

      There are a ton of different variables that could affect LAN throughput.

      Maybe give iperf a shot in the package manager if you are trying to see what your pfsense box is capable of on the LAN side.
      https://forum.pfsense.org/index.php?topic=43393.msg224960#msg224960

      Also a quick google search comes up with article of free tools.
      https://www.raymond.cc/blog/network-benchmark-test-your-network-speed/

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Two  82566DMs in the Optiplex? Or 1 NIC and VLANs?

        Steve

        1 Reply Last reply Reply Quote 0
        • D
          danielfr789
          last edited by

          @pfBasic:

          What kind of NICs?
          What kind of file(s)?
          What are you transferring the file(s) between?
          What kind of media are the file(s) coming off of and going on to?

          There are a ton of different variables that could affect LAN throughput.

          Maybe give iperf a shot in the package manager if you are trying to see what your pfsense box is capable of on the LAN side.
          https://forum.pfsense.org/index.php?topic=43393.msg224960#msg224960

          Also a quick google search comes up with article of free tools.
          https://www.raymond.cc/blog/network-benchmark-test-your-network-speed/

          1. Intel® 82566DM Gigabit LAN 10/100/1000
          2. It's a random 5gb video file i happened to have
          3. I'm using my Desktop Rig. NIC: Intel® I218V (Gigabit LAN PHY 10/100/1000 Mb/s) Again, this PC gets 950 mbps to a Linux server on the same switch.
          4. SSD in the desktop 160gb HDD in the pfSense (which while typing typing this I forgot about and is probably the bottleneck)

          Do you know how to test disk write speed in pfSense by chance?

          1 Reply Last reply Reply Quote 0
          • D
            danielfr789
            last edited by

            @stephenw10:

            Two  82566DMs in the Optiplex? Or 1 NIC and VLANs?

            Steve

            No just one interface right now. I just installed pfSense to see if the machine is capable of running it with 1 gbps throughput. I'm going to order a new NIC with more ports when I can make sure it's speedy enough.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              The HDD speed in pfSense won't make much difference if you're just moving traffic through the firewall. The only time that might make a difference is if you were moving data actually onto the firewall HDD with SCP perhaps.

              Steve

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                In that case try fetching a file to /dev/null from the firewall to rule out the HDD.

                Of course that only tests one NIC so it's not the same as throughput with two NICs which is more demanding.

                Steve

                1 Reply Last reply Reply Quote 0
                • D
                  danielfr789
                  last edited by

                  @stephenw10:

                  The HDD speed in pfSense won't make much difference if you're just moving traffic through the firewall. The only time that might make a difference is if you were moving data actually onto the firewall HDD with SCP perhaps.

                  Steve

                  It's an older HDD though (SATA 2)

                  1 Reply Last reply Reply Quote 0
                  • D
                    danielfr789
                    last edited by

                    @stephenw10:

                    In that case try fetching a file to /dev/null from the firewall to rule out the HDD.

                    Of course that only tests one NIC so it's not the same as throughput with two NICs which is more demanding.

                    Steve

                    Do you know what the command for that is? I'm new to FreeBSD.

                    1 Reply Last reply Reply Quote 0
                    • P
                      pfBasic Banned
                      last edited by

                      It's possible that the HDD is the bottleneck a single large file if you are actually moving that file on to/off of that HDD. Even a 5400rpm laptop drive should be able to push one file at well over 50MB/s, maybe not gigabit, especially for smaller files but I wouldn't expect it to max out at 50MB/s. But if the HDD is busy doing a lot of other things at the same time then it could certainly be the problem.

                      Your NIC's should have no issues at gigabit speed at all.

                      If you're running a bunch of other stuff on your pfsense setup (snort/suricata, pfBNG, squid) then it's more likely that the CPU or HDD is the problem. You can look at CPU performance in Status / Monitoring while transferring the file to see if that is the issue, same thing with your RAM. You can use iostat in the shell to check the HDD performance as well. https://www.freebsd.org/cgi/man.cgi?iostat

                      If you're really curious about your LAN's performance use iperf in combination with the above monitoring tools to see what it's capable of.

                      1 Reply Last reply Reply Quote 0
                      • D
                        danielfr789
                        last edited by

                        @pfBasic:

                        It's possible that the HDD is the bottleneck a single large file if you are actually moving that file on to/off of that HDD. Even a 5400rpm laptop drive should be able to push one file at well over 50MB/s, maybe not gigabit, especially for smaller files but I wouldn't expect it to max out at 50MB/s. But if the HDD is busy doing a lot of other things at the same time then it could certainly be the problem.

                        Your NIC's should have no issues at gigabit speed at all.

                        If you're running a bunch of other stuff on your pfsense setup (snort/suricata, pfBNG, squid) then it's more likely that the CPU or HDD is the problem. You can look at CPU performance in Status / Monitoring while transferring the file to see if that is the issue, same thing with your RAM. You can use iostat in the shell to check the HDD performance as well. https://www.freebsd.org/cgi/man.cgi?iostat

                        If you're really curious about your LAN's performance use iperf in combination with the above monitoring tools to see what it's capable of.

                        Welp. I just opened up the PC to find the model number of the drive. I did some Google searching, and it turns out the drive has an average sequential speed of 59.7MB/s which is close enough to the 50MiB/s I was getting.

                        I guess it's time to purchase a new drive! I will probably buy a cheap and small SSD. Thanks for your help. :)

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          If your Linux server can server something over http/s then:

                          fetch -o /dev/null http://yourserverIP/sometestfile.big
                          

                          Otherwise you can FTP it or you could SCP it but that introduces massive encryption overhead.

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.