Double throughput with Bridge, Lagg or other?
-
Currently have one unassigned and one assigned Lan adapter along with two Vlans each routed to a 1G Wan gw. The single Lan regularly saturates. What is the best way to double the throughput of the router utilizing two physical adapters that will support DHCP with one reserve pool, dns forwarder, limiters and one IP address for client gateways?
-
Where is all that traffic going that saturates the LAN, but apparently not the WAN? Where on the LAN is it saturating? To pfsense? A server? My crystal ball is busted again, so you'll have to provide a bit more info.
-
i don't practice santeria
But more info is needed
BrNP -
If the saturation is due to routing traffic between VLANs o9 the same physical link then using two links there could help. Even separating the VLANs onto two links would.
The best way would be to use both links in an LACP LAGG and run the VLANs over that if your switch supports it.Steve
-
so he's up with LACP LAGG
thx for Info! -
Well I don't know if he is but he probably should be.
That's what I would do if the switch supports it.
Steve
-
@stephenw10 This router is only for distribution of traffic from two wan routers & has dhcp/dns duties. No traffic between vlans. So total traffic in is 2G. The combined traffic is routed out the Lan that is 1G capable. Need a 2G capable lan. This router is small passive cooled outdoor unit so 10G adapter add not an option. So bridging is no good, lagg/lacp better? I’ll need to make the lagg have one ip (virtual interface) to apply dhcp server, fwder, limiter, ruleset too so it behaves as the single lan does now. Hope this provides adequate overview, topology & function req’d. I expect to use load balance lacp if I can go with this solution.
-
Yup LAGG is really the only solution and LACP is definitely definitely what you want to use if you're able to.
-
@stephenw10 Thanks, I’ll give it a try on spare router first.
-
I tested LAGG with LACP and it works fine. Supports DHCP, Limiters, etc. Now I'm trying to migrate using this doc. Hardware is a Qotom-Q190G4 so no option to expand ports. Problem, I can do the first step and add to the LAGG the one unassigned port (igb2). Oddly it shows VLan10 (igb0) and Vlan20 (igb1) can be added even though they are assigned. Step two, I want to add the assigned Lan to the LAGG so all it's rules, etc come into the LAGG. However the Lan (igb3) does not show so can't be added. What has to be changed or removed from the LAN adapter so it shows up in the "LAGG add" while retaining it's configurations?
-
"Only unassigned physical ports can be added to a LAGG" so you have to remove it from LAN first. The firewall rules will remain attached to LAN. After all this you'll have LAN assigned to the LAGG interface. Step 2 in that doc is adding the second interface to the LAGG. Step 7 is adding the interface that was "in" LAN to LAGG. Just be careful in all this you don't disconnect yourself. It's been a while, but I've done this in a remote data center however was using an opt interface.
-
Yup, you have to unassign those interfaces so you will want to be connected to the firewall via the WAN or a management interface when you try that.
Steve
-
So the document is misleading me when it says "Now both re0 and re2 are members of a LAGG and that LAGG is the LAN interface with all of the existing configuration in place"? I'm still not getting how any existing configurations can remain in place if all the interfaces added have to be unassigned.
Question #1; Won't unassigning an interface remove all it's configurations?
Question #2; Why is it letting me add PHYSICAL interfaces igb0 & igb1 that ARE assigned?
These are the two issues I'm trying to get answered. I know unassigning them will work, that's obvious. But then I'll be left with hours of reconfiguring the unassigned interface. I'm trying to avoid many hours of work.
-
Create the lagg with just one unassigned NIC.
Re-assign LAN from the physical NIC to the LAGG. LAN config remains.
Add the, now unassigned, NIC that was LAN to the LAGG.
Now you have both NICs in the LAGG and the LAGG assigned as LAN with the same config it had before.
Steve
-
@stephenw10 Don't know why I got hung up on your step #2 which is the doc's step #3. Seems obvious now. Thought it meant something else so wasn't looking where I shoulda been. Uggg! Working now, thanks to you and everyone.
-
After running igb2 and igb3 as dynamic active LACP members I find that the GUI Lan "Traffic Graph" shows 2G max, however the Status, Monitoring for the Lan adapter only shows 1G max. And an SNMP probe, via PRTG, only shows 1G max. Is this by design or a shortcoming?
-
Unfortunately there have been a number of doubling or halving bugs affecting the graph data over the years. And it's usually the traffic graphs that are wrong. For example:
https://redmine.pfsense.org/issues/10812
Though I think that only affected 2.5. And it's now resolved.Are you actually seeing ~2Gbps if you test from something other than the firewall?
How are you actually generating that traffic?
Steve
-
I'm running 2.4.5, haven't applied 2.4.5_1 yet. I'm looking at actual customer traffic. LACP was applied because the single adapter Lan was maxing out during peak hour load. With LACP now active I'm seeing 1G - 1.3G of actual traffic. Whatever the GUI, or the sum of both switch ports reports, the GUI monitor page or SNMP only sees 1/2 of this value. Was there a fix with _1?
-
Nothing listed: https://docs.netgate.com/pfsense/en/latest/releases/2-4-5-p1.html
But there might be other things not shown there.
You should update to 2.4.5p1 anyway for all the other things that are fixed there.
Steve
-
Upgrading to 2.4.5_1 appears to have corrected the LACP 1/2 throughput issue.
