Web configurator extremely slow over non-LAN interface

[ask]

When I access our pfSense boxes over https://wan.ip/ rather than using the LAN IP it's Super Extremely Slow.  So slow that the pages often don't finish loading before the browser times out.  SSH forwarding the port (and then accessing https://127.0.0.1:8080/ or some such) is also very slow.  Using the LAN IP is always fast, even over the same connection (just tunneled through IPsec).

Any ideas?

• ask

[cmb]

Probably the reply-to rule changes, if you're on the same subnet as the WAN. This was fixed about a week ago or so.

[ask]

@cmb:

Probably the reply-to rule changes, if you're on the same subnet as the WAN. This was fixed about a week ago or so.

Might be related, but I don't think it's exactly that.  :-/

1. I'm on a different subnet than the WAN

2. Using the 1.2.1-RC1-20080819-2337.tgz snapshot.

[NickC]

Yes I see this with the same snapshot. See:
http://forum.pfsense.org/index.php/topic,10915.0.html
I still can't tunnel http traffic through SSH without timeouts.

Can anybody get reasonable data rates through a SSH tunnel with 1.2.1 ?

Nick.

[cmb]

I haven't had any problems accessing from WAN since the reply-to fix.  I suggest firing up tcpdump and seeing what's happening.