Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    4 wan pfsense not loadbalancing accurately

    Scheduled Pinned Locked Moved Routing and Multi WAN
    24 Posts 8 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      ccmks
      last edited by

      @tripplex:

      @ccmks that is so true. It works with 3 wan, because i had 3 wan before and it was load balancing fairly accurate but its not working properly since i upgraded to 4 wan.

      I thought I am not the only person who experience this. I am glad someone confirmed it. Now we know pfSense has limitation up to 3 WAN for load balancing. It can be considered as limitation or bug. Someone from development has to look at it.

      I don't think many people are using more than 3 WAN besides us. Too bad, I have to use 4 WAN due to bad internet connection here.

      1 Reply Last reply Reply Quote 0
      • D
        dhruvipatel
        last edited by

        I am not the only person who experience this.

        My official website: http://www.dhruvipatel.com/

        1 Reply Last reply Reply Quote 0
        • P
          pwood999
          last edited by

          In each gateway set the Weight values to something other than 1.

          Mine originally used 1 & 4 for the two WAN's (200Mb & 60Mb), but balancing seems to work much better using 2 & 8

          1 Reply Last reply Reply Quote 0
          • T
            tripplex
            last edited by

            Have a look at the attachment, as you can see the traffic graphs are not reporting the correct figures while a load is on the wans. Its the same on the lan.

            What is the cause of this issue how can i resolve it.

            lb.png
            lb.png_thumb

            1 Reply Last reply Reply Quote 0
            • P
              pwood999
              last edited by

              Try using a different speed test site such as Speediest.net    Your speed-test only shows 19Mbps which is probably just using one of the WAN's for the test.

              Set each GW to the same Tier, and in the Advance setting set the Weights all = 2.

              Also, what external IP's are you using for the GW Monitor ?  They should all be different as far as I know.

              1 Reply Last reply Reply Quote 0
              • D
                doktornotor Banned
                last edited by

                Looking at this thread - erm guys, using a random speedtest is absolutely INVALID way to test load balancing. It's about as "valid" as trying to lagg interfaces and wondering why the bandwidth did not double/triple/… when transferring a file from a single computer.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  QFT:

                  "It's about as "valid" as trying to lagg interfaces and wondering why the bandwidth did not double/triple/… when transferring a file from a single computer."

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • T
                    tripplex
                    last edited by

                    It should be reporting the correct figures while under load. I have 70 devices connected. During the peak hours the network is under heavy load and the traffic graphs only shoes some kilobits being used, they hardly go up. So I am wondering if its because of the access point being used, but then again that shouldn't matter whether wireless or lan.

                    Only thing I can say is the traffic graph needs some work and the loadbalancing also.

                    1 Reply Last reply Reply Quote 0
                    • C
                      ccmks
                      last edited by

                      @tripplex:

                      It should be reporting the correct figures while under load. I have 70 devices connected. During the peak hours the network is under heavy load and the traffic graphs only shoes some kilobits being used, they hardly go up. So I am wondering if its because of the access point being used, but then again that shouldn't matter whether wireless or lan.

                      Only thing I can say is the traffic graph needs some work and the loadbalancing also.

                      Again, this is can be considered as a bug. If the developer can't fix it then I will consider pfSense has multi-wan limitation above 3 WAN.

                      I also have multiple device actively using internet and only seems the first 2 of my 4 WAN are active and rest of them stay idle.

                      Let alone multi-WAN, I also have problem with sticky connection which is defeat purpose of having load balancing if I have to setup fail-over for HTTPS (you can't do fail-over for HTTPS for non standard 443 port which I used to manage multiple remote router with various port).

                      I ended up purchasing third party router to do loadbalancing and my pfSense just for internal router and VPN.

                      So sad for pfSense which it's loadbalancing I use to proud is gone.

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by Derelict

                        IDK, guys. This is T-Rex-ing a mix of traffic through a 4 Tier-1 LOADBALANCE group.

                        Yes it's 2.4-BETA but that's what I have set up right now.

                        Looks load-balanced to me.

                        Screen Shot 2017-02-26 at 12.47.13 PM.png

                        Screen Shot 2017-02-26 at 12.57.55 PM.png

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • T
                          tripplex
                          last edited by

                          i see so you think we should all use 2.4 beta?

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            No. It's just what I have available to test in this lab right now. I have no reason to think the results would be any different in 2.3.3. Which I see you are not running since you have the old-style traffic graphs. Before calling out a bug you should at least be on the current version.

                            Similar results with 8 interfaces in LB, btw.

                            Speed tests are a lousy way to test load balancing. T-Rex is generating about 350K states.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              8 WAN Load Balance 2.3.2-p1

                              Load-Balance-8-WAN-2.3.2-p1.png
                              Load-Balance-8-WAN-2.3.2-p1.png_thumb

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by

                                8 WAN Load Balance 2.3.3

                                Load-Balance-8-WAN-2.3.3.png
                                Load-Balance-8-WAN-2.3.3.png_thumb

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                1 Reply Last reply Reply Quote 0
                                • T
                                  tripplex
                                  last edited by

                                  I see.  So what do you recommend we use to do the speed test then?

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    Actual, distributed traffic.

                                    There is no way for the firewall to know what a state is going to do. Download 80MByte/sec or camp on a slow IMAP account that gets 2 messages per day.

                                    Load Balancing distributes states according to the gateway weights.

                                    As you can plainly see, it works great for lots of states.

                                    For one or two states a speed test site might generate, not so much.

                                    Real workloads do pretty well with load balancing.

                                    Don't over-think it.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • T
                                      tripplex
                                      last edited by

                                      I see. Thanks

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.