PFsense limiting bandwidth (causing slowness)

universal9gsm

Hey guys… I did a lot of research with no resolution so this is my attempt to get some help from some experts here. My issue is I have gigabit internet service (up and down) from my ISP. However when I am doing uploads or speedtest my download speed is around 400mbps and upload at 50mbps but when I bypass pfsense and connect my laptop directly to the ISP handoff I am getting around 900mbps down and 800mbps upload.

I have a pfsense as my router with the following specs
Pfsense -
Intel(R) Atom(TM) CPU C2758 @ 2.40GHz
8 CPUs: 1 package(s) x 8 core(s)

Memory usage
4% of 8129 MB

SWAP usage
0% of 16384 MB

Load average
0.00, 0.02, 0.05

MBUF Usage
4% (35436/1000000)

as you can see its pretty hefty hardware for a gigabit internet and the rest of my topology is as follows

ISP Ethernet handoff ---> PFSENSE ----> Cisco 3750G (3gb LACP bundle trunked for multiple vlans) ---> all my host connected to it wired and wireless.

no packages installed and my interfaces and vlans are as follows

WAN
(DHCP) up
1000baseT <full-duplex>
x.x.x.x (public ip)

DATA up
autoselect
10.10.10.1

SECURITY up
autoselect
10.10.20.1

MGMT up
autoselect
10.10.30.1

GUEST up
autoselect
172.16.64.1

as for rules I have a single port-forward configured on a specific port for my server and pretty much wide open on my firewall rules going out. I thought maybe my LACP bundle could be causing a potential issue? but at this point that's all I have any help will be great.</full-duplex>

stephenw10

Try to test only one thing at a time. Connect your laptop directly to the pfSense LAN interface and run the test there.
You can try to test directly from the pfSense command line so you are testing only the WAN interface but you'll need to know a good source to see 900Mbps.
How are you testing?
With such a huge drop in bandwidth, 800Mbps to 50Mbps, I would suspect a bad connection somewhere. Check the Status > Interfaces page for errors or collisions. Is your WAN not set to autoselect?

Steve

universal9gsm

@stephenw10:

Try to test only one thing at a time. Connect your laptop directly to the pfSense LAN interface and run the test there.
You can try to test directly from the pfSense command line so you are testing only the WAN interface but you'll need to know a good source to see 900Mbps.
How are you testing?
With such a huge drop in bandwidth, 800Mbps to 50Mbps, I would suspect a bad connection somewhere. Check the Status > Interfaces page for errors or collisions. Is your WAN not set to autoselect?

Steve

So currently I am testing a host pc that's connected to a cisco switch which is connected to pfsense… I have tried multiple devices that are on different ports on that switch... but I will try your suggestion for connecting a pc directly to a lan port on pfsense and monitor the results... as for collisions on the nics its pretty much 0 on all interfaces. WAN is negotiated a gig.

Harvy66

Have you done an iperf to, from, and through PFSense? You want to make sure it works as expected in an ideal case before trying to hunt down issues in unideal cases. In all issues in life, when debugging problems, eliminate as many variables as possible.