[SOLVED] Slow PIA VPN connection on pfsense 2.4b

Runenaldo

Ok so I have now tried 5 EU servers and one US server without any difference, they are all around 40-60/15-40mbps. (it seems to be my max speed today)
as per usual I turned off the pfsense vpn and tried without any vpn and also the pc client, with the same results as always = around 100/100mbps

Also tried to remove:
fast-io
sndbuf 524288
rcvbuf 524288

it made it worse every single time, around 5mbps down.

@pfBasic:

sub 50ms RTT is pretty good for a VPN connection. sub 10ms is good for a normal WAN. Sub 1ms you will probably only ever see on your local network.

Perfect, these numbers I'm well within of.

@pfBasic:

Honestly, your VPN settings look like they should work just fine. The fact that you could get higher speeds with tweaking on that server means it can give you those speeds.
I would still try a few different servers.

But I think something is wrong with your box. Probably a config somewhere. That hardware is confirmed to get high VPN throughput.

Try backing up your config, and doing a clean install. Setup just the VPN and see if it works for you. If so then try restoring the config.xml

Would like to do that, but is it possible without a screen and keyboard? ::) I borrowed those two items when installing them last time, since my only pc is a laptop.

If not I will have to ask around ;D

pfBasic

Yeah you'll need a keyboard and screen.

You can try backing up your config, then Diagnostics / Factory defaults.

That will only fix it if it's a weird setting you've placed somewhere that's causing problems.
If somethings corrupted with the instal it won't help you, you'll need clean install for that.

What other packages are you running?

Runenaldo

@pfBasic:

Yeah you'll need a keyboard and screen.

You can try backing up your config, then Diagnostics / Factory defaults.

That will only fix it if it's a weird setting you've placed somewhere that's causing problems.
If somethings corrupted with the instal it won't help you, you'll need clean install for that.

What other packages are you running?

I thought so much.. Will have to ask around then :)

Now that we are speaking about the possible reason being the install, I do remember that the system sometimes hangs and gives an error message while loading pfsense from a reboot. Never gave it much thought as it was the 2.4 beta and trying to run it mirrored on two USB's.

I unfortunately cannot remember what the error message was. but probably something about it couldn't find or load something.

I was running Suricata, but as it is very CPU hungry, I reverted back to a former backup before it was installed, to see if that was the problem.

pfBasic

Yeah you shouldn't be getting error messages even on 2.4 during boot.

I also run 2.4.0 BETA on USB sticks in raidz2 with a RAM disk and get no error messages.

Runenaldo

@pfBasic:

Yeah you shouldn't be getting error messages even on 2.4 during boot.

I also run 2.4.0 BETA on USB sticks in raidz2 with a RAM disk and get no error messages.

Hopefully this is the reason (knock on wood) :D

So since I have 2 USB3 ports and 2 USB2 port available, how do I go about installing?
Because I've read somewhere here on the forum that USB3 ports are not a good idea..

pfBasic

I haven't heard that?

USB3.0 drives are often not recommended as install media because they tend to get hotter, but I don't know if that even matters.

I would leave the drives you'll install to in the 2.0 slots and put the one with the image in whatevers left over.

Runenaldo

@pfBasic:

I haven't heard that?

USB3.0 drives are often not recommended as install media because they tend to get hotter, but I don't know if that even matters.

I would leave the drives you'll install to in the 2.0 slots and put the one with the image in whatevers left over.

Read it over on the hardware forum, but I cant find it now.

It might just be because they get hot.

Will try your suggestion(s) tomorrow, have ordered a screen and keyboard and if all fails with the usbs, I have a 256gb ssd I can donate to the "cause".

pfBasic

Do you use a RAM disk?

Runenaldo

@pfBasic:

Do you use a RAM disk?

Yes, I followed your guide :)

Runenaldo

So during the installation of pfsense 2.4 I ran into the issue I also had the first time I installed it and that was that the installer hanged after I selected to reboot. See picture.

I waited aprox 10-15 mins for it to reboot and then forced it by unplugging the router. Is this normal, should I have waited longer?

In the next picture, this always show up during reboot. Is this normal?

bootstop.jpg_thumb
![Dump devices does not exist.jpg_thumb](/public/imported_attachments/1/Dump devices does not exist.jpg_thumb)
![Dump devices does not exist.jpg](/public/imported_attachments/1/Dump devices does not exist.jpg)

pfBasic

The "no suitable dump device found" error just means that you don't have swap, which is fine as long as that's the way you installed.

I'd try it again and leave it for 20-30min.

There are a few issues with reboot floating around, and there's an issue where reboot can hang for ~20min because it can't install packages but it will eventually continue the boot and then you can get packages installed once boot is complete. The 20 minute hang issue hopefully gets fixed….

So reinstall, let it start rebooting and just walk away, for a good bit of time.

For your hardware I don't think it's an issue but make sure you have latest BIOS/UEFI/firmware installed.

Runenaldo

@pfBasic:

The "no suitable dump device found" error just means that you don't have swap, which is fine as long as that's the way you installed.

I did install without swap, so I can ignore that message in the future :)

@pfBasic:

I'd try it again and leave it for 20-30min.

There are a few issues with reboot floating around, and there's an issue where reboot can hang for ~20min because it can't install packages but it will eventually continue the boot and then you can get packages installed once boot is complete. The 20 minute hang issue hopefully gets fixed….

So reinstall, let it start rebooting and just walk away, for a good bit of time.

It just started its 20mins reboot countdown, so I'm crossing my fingers :)

@pfBasic:

For your hardware I don't think it's an issue but make sure you have latest BIOS/UEFI/firmware installed.

I am all ready, so shouldn't be a problem.

Runenaldo

I'm now on 120 mins, no sign of it wanting to reboot..

Runenaldo

So am I doing something wrong with the install?

Downloading the latest memstick image from here https://snapshots.pfsense.org/amd64/pfSense_master/installer/?C=M;O=D unpacking it, then using Win32DiskImager to make the bootable usb stick. Booting it up and following your guide https://forum.pfsense.org/index.php?action=thankyoupostlist;topic=126597.0;msg=699155 and choosing 2 disk mirror.

pfBasic

I don't think so, there have been multiple users reporting reboot issues. I've never encountered it though so I don't really know how to help except pointing you to these.

https://forum.pfsense.org/index.php?topic=128577.msg712180#msg712180

https://forum.pfsense.org/index.php?topic=126520.msg698661#msg698661

Runenaldo

@pfBasic:

I don't think so, there have been multiple users reporting reboot issues. I've never encountered it though so I don't really know how to help except pointing you to these.

https://forum.pfsense.org/index.php?topic=128577.msg712180#msg712180

https://forum.pfsense.org/index.php?topic=126520.msg698661#msg698661

Thanks, its good to know I'm not the only one.

Will try to install pfsense 2.4 to my SSD instead, hopefully it will work and then when a fix has been implemented I will go back to the sticks.

pfBasic

Honestly if you have an SSD laying around you are better off using that.

In my ZFS Guide I do mention installs to USB sticks, but not because they are better. I mention it because it is a cost saving feature that might enable someone to afford it that otherwise couldn't. There are other reasons to install to USB, but generally speaking if you have an SSD definitely use the SSD.

USB drive installs need you to adjust things to make them last that you wouldn't ever have to worry about with an SSD.

The only advantage they have over SSDs is price, and how common they are (just about anyone can pull an SSD out of a drawer and install pfSense to their machine.

Runenaldo

@pfBasic:

Honestly if you have an SSD laying around you are better off using that.

In my ZFS Guide I do mention installs to USB sticks, but not because they are better. I mention it because it is a cost saving feature that might enable someone to afford it that otherwise couldn't. There are other reasons to install to USB, but generally speaking if you have an SSD definitely use the SSD.

USB drive installs need you to adjust things to make them last that you wouldn't ever have to worry about with an SSD.

The only advantage they have over SSDs is price, and how common they are (just about anyone can pull an SSD out of a drawer and install pfSense to their machine.

Ja I totally understand, was just hoping to save the SSD for other projects. Its a bit overkill to have a 256gb disk in a router system IMO ;D
and as I said in my former post, I will properbly go back to the USB's if I hear news that the issue is fixed.

Runenaldo

Oh btw how would you configure the install with an SSD? how big of a swap size, if any?

pfBasic

I don't think the boot issue is USB specific, others have reported the issue on SSD/HDD.

Swap is normally double your RAM, I believe that's the default setting.

Defaults will work great.