Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    4 wan pfsense not loadbalancing accurately

    Scheduled Pinned Locked Moved Routing and Multi WAN
    24 Posts 8 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      QFT:

      "It's about as "valid" as trying to lagg interfaces and wondering why the bandwidth did not double/triple/… when transferring a file from a single computer."

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • T
        tripplex
        last edited by

        It should be reporting the correct figures while under load. I have 70 devices connected. During the peak hours the network is under heavy load and the traffic graphs only shoes some kilobits being used, they hardly go up. So I am wondering if its because of the access point being used, but then again that shouldn't matter whether wireless or lan.

        Only thing I can say is the traffic graph needs some work and the loadbalancing also.

        1 Reply Last reply Reply Quote 0
        • C
          ccmks
          last edited by

          @tripplex:

          It should be reporting the correct figures while under load. I have 70 devices connected. During the peak hours the network is under heavy load and the traffic graphs only shoes some kilobits being used, they hardly go up. So I am wondering if its because of the access point being used, but then again that shouldn't matter whether wireless or lan.

          Only thing I can say is the traffic graph needs some work and the loadbalancing also.

          Again, this is can be considered as a bug. If the developer can't fix it then I will consider pfSense has multi-wan limitation above 3 WAN.

          I also have multiple device actively using internet and only seems the first 2 of my 4 WAN are active and rest of them stay idle.

          Let alone multi-WAN, I also have problem with sticky connection which is defeat purpose of having load balancing if I have to setup fail-over for HTTPS (you can't do fail-over for HTTPS for non standard 443 port which I used to manage multiple remote router with various port).

          I ended up purchasing third party router to do loadbalancing and my pfSense just for internal router and VPN.

          So sad for pfSense which it's loadbalancing I use to proud is gone.

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by Derelict

            IDK, guys. This is T-Rex-ing a mix of traffic through a 4 Tier-1 LOADBALANCE group.

            Yes it's 2.4-BETA but that's what I have set up right now.

            Looks load-balanced to me.

            Screen Shot 2017-02-26 at 12.47.13 PM.png

            Screen Shot 2017-02-26 at 12.57.55 PM.png

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • T
              tripplex
              last edited by

              i see so you think we should all use 2.4 beta?

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                No. It's just what I have available to test in this lab right now. I have no reason to think the results would be any different in 2.3.3. Which I see you are not running since you have the old-style traffic graphs. Before calling out a bug you should at least be on the current version.

                Similar results with 8 interfaces in LB, btw.

                Speed tests are a lousy way to test load balancing. T-Rex is generating about 350K states.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by

                  8 WAN Load Balance 2.3.2-p1

                  Load-Balance-8-WAN-2.3.2-p1.png
                  Load-Balance-8-WAN-2.3.2-p1.png_thumb

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    8 WAN Load Balance 2.3.3

                    Load-Balance-8-WAN-2.3.3.png
                    Load-Balance-8-WAN-2.3.3.png_thumb

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • T
                      tripplex
                      last edited by

                      I see.  So what do you recommend we use to do the speed test then?

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        Actual, distributed traffic.

                        There is no way for the firewall to know what a state is going to do. Download 80MByte/sec or camp on a slow IMAP account that gets 2 messages per day.

                        Load Balancing distributes states according to the gateway weights.

                        As you can plainly see, it works great for lots of states.

                        For one or two states a speed test site might generate, not so much.

                        Real workloads do pretty well with load balancing.

                        Don't over-think it.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • T
                          tripplex
                          last edited by

                          I see. Thanks

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.