Web configurator extremely slow over non-LAN interface

ask · Aug 20, 2008, 10:37 PM

When I access our pfSense boxes over https://wan.ip/ rather than using the LAN IP it's Super Extremely Slow. So slow that the pages often don't finish loading before the browser times out. SSH forwarding the port (and then accessing https://127.0.0.1:8080/ or some such) is also very slow. Using the LAN IP is always fast, even over the same connection (just tunneled through IPsec).

Any ideas?

ask

cmb · Aug 20, 2008, 11:20 PM

Probably the reply-to rule changes, if you're on the same subnet as the WAN. This was fixed about a week ago or so.

ask · Aug 20, 2008, 11:44 PM

@cmb:

Probably the reply-to rule changes, if you're on the same subnet as the WAN. This was fixed about a week ago or so.

Might be related, but I don't think it's exactly that. :-/

I'm on a different subnet than the WAN
Using the 1.2.1-RC1-20080819-2337.tgz snapshot.

NickC · Aug 21, 2008, 12:10 AM

Yes I see this with the same snapshot. See:
http://forum.pfsense.org/index.php/topic,10915.0.html
I still can't tunnel http traffic through SSH without timeouts.

Can anybody get reasonable data rates through a SSH tunnel with 1.2.1 ?

Nick.

cmb · Aug 21, 2008, 12:44 AM

I haven't had any problems accessing from WAN since the reply-to fix. I suggest firing up tcpdump and seeing what's happening.