Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense Struggling big time.

    Scheduled Pinned Locked Moved General pfSense Questions
    51 Posts 14 Posters 9.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • KOMK
      KOM
      last edited by

      Apr 5 10:25:24  rc.gateway_alarm  20213  >>> Gateway alarm: WAN_DHCP (Addr:81.107.216.1 Alarm:1 RTT:87812ms RTTsd:49587ms Loss:21%)

      This isn't good.  pfSense gateway quality detection thinks your WAN is really flaky.  What does it say under Status - Gateways?

      1 Reply Last reply Reply Quote 0
      • x2rlX
        x2rl
        last edited by

        @KOM:

        Apr 5 10:25:24  rc.gateway_alarm  20213  >>> Gateway alarm: WAN_DHCP (Addr:81.107.216.1 Alarm:1 RTT:87812ms RTTsd:49587ms Loss:21%)

        This isn't good.  pfSense gateway quality detection thinks your WAN is really flaky.  What does it say under Status - Gateways?

        WAN_DHCP 81.107* 81.107* 12.19ms 4.111ms 0.0% Online Interface WAN_DHCP Gateway
        WAN_DHCP6 fe80::201:5cff:fe80:1447 Pending Pending Pending Pending Interface WAN_DHCP6 Gateway
        with deluge off

        On

        WAN_DHCP 81.107.* 81.107* 598.681ms 216.247ms 38% Offline Interface WAN_DHCP Gateway
        WAN_DHCP6 fe80::201:5cff:fe80:1447 Pending Pending Pending Pending Interface WAN_DHCP6 Gateway

        1 Reply Last reply Reply Quote 0
        • KOMK
          KOM
          last edited by

          Try going to System - Routing - Gateways.  Edit your gateway and check the Disable Gateway Monitoring checkbox and try again.  It seems that your torrent app is filling your pipe to the point that the upstream monitor thinks your link is dying.

          1 Reply Last reply Reply Quote 0
          • x2rlX
            x2rl
            last edited by

            @KOM:

            Try going to System - Routing - Gateways.  Edit your gateway and check the Disable Gateway Monitoring checkbox and try again.  It seems that your torrent app is filling your pipe to the point that the upstream monitor thinks your link is dying.

            Seems to be the same Kom. Thanks again for the help.

            1 Reply Last reply Reply Quote 0
            • JailerJ
              Jailer
              last edited by

              Hmmm, crapping out under heavy traffic. What hardware is pfsense installed on?

              I'm betting there's a Realtek NIC in there.

              1 Reply Last reply Reply Quote 0
              • x2rlX
                x2rl
                last edited by

                @Jailer:

                Hmmm, crapping out under heavy traffic. What hardware is pfsense installed on?

                I'm betting there's a Realtek NIC in there.

                Smoothwall SWG700 I think its called

                1 Reply Last reply Reply Quote 0
                • SammyWooS
                  SammyWoo
                  last edited by

                  @KOM:

                  This isn't good.  pfSense gateway quality detection thinks your WAN is really flaky.  What does it say under Status - Gateways?

                  Flaky or stuffed to the gill.

                  1 Reply Last reply Reply Quote 0
                  • KOMK
                    KOM
                    last edited by

                    While we may never get to the bottom of your actual issue, you would still be best served by some traffic shaping so that your torrent traffic doesn't hog all your bandwidth.

                    1 Reply Last reply Reply Quote 0
                    • x2rlX
                      x2rl
                      last edited by

                      @KOM:

                      While we may never get to the bottom of your actual issue, you would still be best served by some traffic shaping so that your torrent traffic doesn't hog all your bandwidth.

                      Thanks is there some kind of guide on how you do this which you know of KOM

                      1 Reply Last reply Reply Quote 0
                      • KOMK
                        KOM
                        last edited by

                        Traffic shaping is probably THE hardest element of pfSense to figure out.  Try:

                        https://www.youtube.com/watch?v=it_5xvC28vs

                        https://www.youtube.com/watch?v=rF46PNid1Mo

                        1 Reply Last reply Reply Quote 0
                        • B
                          bartkowski
                          last edited by

                          @KOM:

                          Traffic shaping is probably THE hardest element of pfSense to figure out.  Try:

                          https://www.youtube.com/watch?v=it_5xvC28vs

                          https://www.youtube.com/watch?v=rF46PNid1Mo

                          and this Darkvodka34 https://forum.pfsense.org/index.php?topic=126637.0 for general discussion, and this for message highlighting what to do.

                          1 Reply Last reply Reply Quote 0
                          • SammyWooS
                            SammyWoo
                            last edited by

                            @Darkvodka34:

                            Thanks is there some kind of guide on how you do this which you know of KOM

                            I suggest save your conf, then turn on Traffic Shaper and see what it does, always can revert back by restoring conf.

                            If you use the Traffic Shaper's Wizard, it guides you through pages, and on the second page I believe, it presents you with common scenarios you want to deal with and one of them is ta-da, peer-to-peer protocol, u can simply ENABLE it and give it LOW Priority and see what happens.

                            In Cisco-land, Traffic Shaper is called Priority Queuing, which is a term simpler to understand what it's doing underneath.

                            In Traffic Shaper, a service sits on the WAN port controlling the uploads.  a second service sits on the LAN port controlling the downloads.

                            The gists of it is, rather than letting traffic pass though these ports as they come, the TS services hold the packets on queues (or buffer if u prefer), each queue has a priority label, another service takes the packets from the queues and shoot them out the interface. The highest priority queue gets serviced more often than the lower queues.  Think of a traffic cop sitting at a intersection and letting go of the commuter lane for 1 minute, while let go of the next passenger lane only for 15 seconds.  This way the packets flow is controlled, giving a chance for everybody to go through, eventually.

                            Well there is more to it, if you really get into it, but last paragraph is the gist and I hope easy to understand.

                            Bottom line is, without flow control, an app, in this case peer-to-peer often takes over and everybody else get stuck/freeze.

                            Don't know why your consumer grade box works, it could be just a coincidence. There is the possibility that it came with QOS (another Traffic Shaper term) turned on.  Lots of consumer boxes these days come with a variety versions of QOS, in part to deal with VOIP.

                            1 Reply Last reply Reply Quote 0
                            • ?
                              A Former User
                              last edited by

                              Your ISP obviously prefers ipv4. For now I would turn ipv6 off. That Gateway pending, pending would bug me. Waste of packets.
                              With your ISP speeds your network seems to be slow or buggy from some of your replies here.
                              "Well its better other computers don't drop but do run slow".
                              Do you try to limit the seeding at all and to be clear your pfsense has direct line to ISP (no modem in front) correct. 21% loss not good.
                              Your WAN has adjustable pre-set timings in DHCP Client Configuration under Interfaces/WAN.
                              Maybe try spoofing your MAC on the PfSense to what the consumer MAC is. Heck could be many things.
                              I would put your ISP unit back and log in and go over what settings it may have that you may have missed, and if you can look at any logs that unit has that could help you figure out things.

                              Traffic shaping is great but do not forget the elephant in the room. Your Gateway link is crashing.
                              It may have a problem PfSense is just making more obvious.
                              https://www.dslreports.com/ Good info here also.

                              1 Reply Last reply Reply Quote 0
                              • x2rlX
                                x2rl
                                last edited by

                                Update I turned off Ipv6 and Enabled UPnP & NAT-PMP allow 40000-41000 10.0.0.52/24 40000-41000

                                Boom all working like it used to :) Odd right?

                                Thanks again to all.

                                1 Reply Last reply Reply Quote 0
                                • SammyWooS
                                  SammyWoo
                                  last edited by

                                  Well u must made those changes for a reason, hey as long as it works.

                                  1 Reply Last reply Reply Quote 0
                                  • ?
                                    A Former User
                                    last edited by

                                    Odd it is then.  ;)

                                    1 Reply Last reply Reply Quote 0
                                    • x2rlX
                                      x2rl
                                      last edited by

                                      Nope seen to work fine for about 2 hours now back to how it was before. :(

                                      1 Reply Last reply Reply Quote 0
                                      • x2rlX
                                        x2rl
                                        last edited by

                                        @webtyro:

                                        Your ISP obviously prefers ipv4. For now I would turn ipv6 off. That Gateway pending, pending would bug me. Waste of packets.
                                        With your ISP speeds your network seems to be slow or buggy from some of your replies here.
                                        "Well its better other computers don't drop but do run slow".
                                        Do you try to limit the seeding at all and to be clear your pfsense has direct line to ISP (no modem in front) correct. 21% loss not good.
                                        Your WAN has adjustable pre-set timings in DHCP Client Configuration under Interfaces/WAN.
                                        Maybe try spoofing your MAC on the PfSense to what the consumer MAC is. Heck could be many things.
                                        I would put your ISP unit back and log in and go over what settings it may have that you may have missed, and if you can look at any logs that unit has that could help you figure out things.

                                        Traffic shaping is great but do not forget the elephant in the room. Your Gateway link is crashing.
                                        It may have a problem PfSense is just making more obvious.
                                        https://www.dslreports.com/ Good info here also.

                                        Ive turned of Ipv6

                                        There are no settings on my modem when in "modem mode" Virgin media for you.

                                        Clone the modem mac? sorry not sure what you mean

                                        looks like I may need traffic shaping :/

                                        1 Reply Last reply Reply Quote 0
                                        • ?
                                          A Former User
                                          last edited by

                                          I checked Virgin Media and did not see 350/100 speeds. They did have 350/20 up at the website.
                                          So I assume you are running a Hub in modem mode(bridged) with PfSense behind it. OK this is making more sense.
                                          Well you did have it running better, progress. Did you try seeding during this time. If you did you still may have the wrong settings with torrent. Too high a rate of seeding (upload) leaves no room for downloads, yes.
                                          Know your speed too, very important with torrent. Test it.
                                          Your words:
                                          "Is bandwidth is unlimited I have no limits my speed is 350mb and 100mb up
                                          The traffic graph on single torrent is max when there is alot on its goes down.
                                          Sometimes it will work fine maybe 10% of the time"
                                          I am sure you  want it 100% of the time. ;)
                                          I think if you get the torrent tuned better then after that, if you want to tweak more bandwith away from other users then
                                          I would recommend traffic shaping.
                                          Why have the firewall work harder when proper torrent settings will work better.
                                          Check this site out. You may have a torrent problem not router problem.
                                          https://torrentfreak.com/calculate-your-optimal-bittorrent-settings/

                                          1 Reply Last reply Reply Quote 0
                                          • x2rlX
                                            x2rl
                                            last edited by

                                            im on 100mb up I pay extra for it, My seeding is nothing to do with this server also I do not even go close to max upload no where close.

                                            Also been using the same settings for years pal, Deluge is set up perfect.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.