Pfsense blocking Livestream
-
I have not seen it in the firewall log I can't find any entry for the source in the log whatsoever. the only reason i know where it is going is because i did a packet capture on the lan for the device that is streaming. I know it's the pfsense router because or previous router which i just replaced with pfsense didn't have any issues with the livestream it wasn't as aggresive as this one.
-
@derreckbercier said in Pfsense blocking Livestream:
I have not seen it in the firewall log I can't find any entry for the source in the log whatsoever. the only reason i know where it is going is because i did a packet capture on the lan for the device that is streaming. I know it's the pfsense router because or previous router which i just replaced with pfsense didn't have any issues with the livestream it wasn't as aggresive as this one.
If you do not see the device's IP address in the pfSense firewall log, then pfSense is not blocking the traffic. Something else is at fault. Assuming pfSense is the only thing between your streaming device and the Internet, then my number one theory is a hardware problem. The most likely one is a NIC port speed/duplex mismatch between the box you have pfSense on and either your WAN connection or the LAN connection. That will cause terrible network performance and very poor streaming quality.
What are you running pfSense on? Is it a Netgate appliance or your own hardware? If your own hardware, what brand of network interface card is it using? What is the speed and duplex capabilities of the switch on your LAN and what type of WAN connection do you have?
-
I am running pfsense on a hp computer with a Intel PRO/1000 Pt Dual Port Server Adapter. And you are a godsend, I went back and checked my port speed settings and set my lan to autoselect and boom it started streaming correctly. I had it set to 1000baseTX Full Duplex apparently that was incorrect. Pfsense set my lan port to 1000baseT full duplex and it is working as of right now. Thanks hopefully this is the issue.
-
i take that back! lol as soon as we start streaming my upload goes to 0. so i'm trying to figure that out right now.
-
@derreckbercier said in Pfsense blocking Livestream:
I am running pfsense on a hp computer with a Intel PRO/1000 Pt Dual Port Server Adapter. And you are a godsend, I went back and checked my port speed settings and set my lan to autoselect and boom it started streaming correctly. I had it set to 1000baseTX Full Duplex apparently that was incorrect. Pfsense set my lan port to 1000baseT full duplex and it is working as of right now. Thanks hopefully this is the issue.
Most devices these days need their NIC ports set to "auto" in order to play well together. When one side is "auto" and the other is manually set, they frequently can't work out a connection and each side will assume its "default". The problem is they rarely default to the same settings and thus don't match up.
-
@derreckbercier said in Pfsense blocking Livestream:
i take that back! lol as soon as we start streaming my upload goes to 0. so i'm trying to figure that out right now.
Your livestream may be saturating your link. What is the upload bandwidth provided by your ISP? Also, TCP is a "first-come first-gets-all" sort of protocol. So a single device can conceivably grab all the bandwidth and starve other devices attempting to send/receive on the link.
-
I have a 100mb pipe that's symmetrical.
-
@derreckbercier said in Pfsense blocking Livestream:
I have a 100mb pipe that's symmetrical.
Well, it should be pretty hard to saturate that link with a typical livestream upload. How big is your audience for this livstream? If several dozens of users are trying to view the stream simultaneously with your upload, then I could see how your download link might approach saturation. That could then impact upload as the ACKs could not get come through from the livestream remote host on a timely basis.
-
i've been troubleshooting this, and part of the problem is since switching to pfsense it has given my other networks 1gb access to the niq, my old router only the main lan was at 1gb every other network was at 100mb. So something on my other network is hogging up all the bandwith on that switch and i'm trying to narrow it down. Thanks for everyone's help on this problem so far.
-
@derreckbercier said in Pfsense blocking Livestream:
i've been troubleshooting this, and part of the problem is since switching to pfsense it has given my other networks 1gb access to the niq, my old router only the main lan was at 1gb every other network was at 100mb. So something on my other network is hogging up all the bandwith on that switch and i'm trying to narrow it down. Thanks for everyone's help on this problem so far.
If you are uploading to a remote streaming host, but then your local LAN clients are simultaneously downloading the stream from that remote host over the same Internet connection, you can use it all up to the point the ACKs from the remote host do not make it back to your streamer PC in a reasonable time. So your streamer PC slows down and slows down and slows down trying to get the connection going. Uploading requires enough bandwidth on the download side for ACKs from the remote receiving end to get through. If you have tons of local users sucking up all the download bandwidth viewing the stream, then nothing is left for your uploading PC to receive its ACKs. Giving those "hungry" local LAN clients a gigabit pipe to suck from will exacerbate the problem. If they were all formerly sharing a 100 megabit pipe into the central switch, they could have been partially moderating each other so that the sum was not overwhelming to your uploading stream.
Don't know your situation precisely, but from your description it sounds like you were uploading to a remote host on the web that your local clients viewed from. Is that true, or do I have it wrong?
If I've correctly guessed your setup, then you can benefit from traffic shaping on pfSense that gives your uploading streamer PC priority bandwidth.
