Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Bringing back my ZBOX CI323

    Scheduled Pinned Locked Moved Hardware
    15 Posts 4 Posters 1.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Interesting, does iperf3 not trigger it then?

      1 Reply Last reply Reply Quote 0
      • T
        TheNarc
        last edited by

        I'd bet it would; I was just under the impression that FreeBSD only had iperf, and that iperf3 was not backwards compatible, but my information may be wrong. In other words, I was just trying to match versions between the client and server, rather than imply that the issue can only be reproduced using a specific version of iperf.

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Ah, iperf3 is in our repo and is superior in a number of ways. There's GUI package for it but it's pretty self explanatory at the CLI:
          pkg install iperf3
          rehash

          Steve

          1 Reply Last reply Reply Quote 0
          • L
            Love.IT.Again @TheNarc
            last edited by

            @thenarc said in Bringing back my ZBOX CI323:

            I was always able to force the watchdog timeouts with the built-in driver using iperf. You can set up the pfSense machine as either the client or the server; I usually set it up as the server (Diagnostics > iperf Server). Then you need another machine on your LAN to be the client. There are Windows binaries if you don't have any Linux hosts:
            https://iperf.fr/iperf-download.php
            You want original iperf, not iperf3. If you run the server with default options, then on a client machine you should just need to run:
            iperf -v <PFSENSE_IP>
            (where <PFSENSE_IP> is the IP address of the pfSense machine. Again, based on my historical experience, if you can get through several rounds of that, you should be good. Also there's a lot of evidence from other people running the official Realtek drivers on this machine that it's stable (I run two CI323s and they've been perfectly stable for years).

            Windows 10 OS are currently installed in the two PC. I am currently using iperf2 (i have some problem with the iperf3). iperf -v <pf_Sense IP>.......................returns only the version of the iperf being used. So I just use a simple command iperf --port 5201 -c <pf_sense IP>. The bandwidth that I am getting is just 234 MBits/s (the most)... the pfSense Machine is the server.

            If I make the Windows 10 as the server and the pfsense machine as the client, the bandwidth that I can get is 634Mbits/s.

            Any idea about it?

            1 Reply Last reply Reply Quote 0
            • T
              TheNarc
              last edited by

              What is the bandwidth setting for your upload limiter? I hadn't thought of that, but if you have a catch-all rule to place all inbound traffic (from the perspective of your LAN interface) into a limiter, then that's going to include the iperf traffic when your host is the client. When the pfsense machine is the client, then it originates the flow, and firewall rules aren't applied to traffic originating from the firewall itself, so it won't be placed into a limiter.

              L 1 Reply Last reply Reply Quote 0
              • L
                Love.IT.Again @TheNarc
                last edited by

                @thenarc said in Bringing back my ZBOX CI323:

                What is the bandwidth setting for your upload limiter? I hadn't thought of that, but if you have a catch-all rule to place all inbound traffic (from the perspective of your LAN interface) into a limiter, then that's going to include the iperf traffic when your host is the client. When the pfsense machine is the client, then it originates the flow, and firewall rules aren't applied to traffic originating from the firewall itself, so it won't be placed into a limiter.

                Where can I see the upload limiter? The pfSense in my box was newly installed so there a no rules in WAN only the LAN side (basic rule only). I created some In and Out limiters, tested them, but I just remove the rules associated with them.

                One more thing, where can I see the watchdog....?

                T 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  The watchdog errors will be in the main system log if you see them.

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • T
                    TheNarc @Love.IT.Again
                    last edited by

                    @love-it-again Sorry, been in a lot of traffic shaping threads recently and didn't realize you weren't doing shaping. If you have no limiters set up, I'm not sure what would account for the dramatically different results you see when the pfSense machine acts as the iperf server versus client. You've run the tests enough times both ways to know that this is a consistent difference? If you had set up limiters before, it's probably worth double checking to make sure you really got rid of them. Firewall > Traffic Shaper > Limiters

                    L 1 Reply Last reply Reply Quote 0
                    • L
                      Love.IT.Again @TheNarc
                      last edited by

                      @thenarc

                      No limiters at all.

                      As I said before, I am getting a bandwidth of 220 to 234 MBits/s using my windows 10 PC as the client (192.168.2.100) and the pfSense Box as the server (192.168.2.1). But when i used "iperf -c 192.168.2.1 -P 20" (20 parallel clients connections) the total bandwidth is 630 to 660 Mbits/s. Which is somewhat near the results when I make the PC as the server and the pfSense Box as the client. Increasing the number on -P will not increase the bandwidth anymore. It seems I cannot get a gigabit connection.

                      1 Reply Last reply Reply Quote 0
                      • T
                        TheNarc
                        last edited by

                        It may be worth trying with UDP mode too. I just did that and got a little above 700Mbps. I wouldn't be shocked if it's just not possible to do much better than that with these Realtek NICs.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.