Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Pfsense sync-traffic exploded after update

    General pfSense Questions
    2
    3
    299
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fwcheck last edited by

      We have a pretty large pfsense installation.

      After updating to 2.3.4 the sync-traffic raised on a lot of systems from a few Mbit/s to a hundert Mbit/s,
      with even worse, sometimes connections are stalled due to sync-traffic problems.

      The traffic profile is still the same (a few Gbit/s of traffic through the system).

      Has anybody seen the same effect ?
      Are there any way to reduce the sync traffic (e.g. patch default to sloppy)?

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        You've left out an important detail: What version were you on before?

        Also, how busy is the firewall? Ballpark figures for throughput, active connections, connections/sec if you know it.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • F
          fwcheck last edited by

          We have noticed the change at several systems:

          One Example:
          8 vcpus Intel(R) Xeon(R) CPU E5-2697 v3 @ 2.60GHz 8 CPUs: 8 package(s) x 1 core(s)
          Version used before:  2.3.3-RELEASE-p1
          Throughput: 1 - 2 Gbit/s
          States < 10k
          Conns/s < 100

          We have changed several parameters (virtual-infrastructure, hw-firmware, and pfsense-update)

          We noticed that sync traffic is reaching 10% of WAN-Traffic which is a real huge increase.
          I have attached two files (after_update is the sync-traffic, wan_traffic is the wan traffic).

          At time our solution is to turn sync off. I have also noticed that high traffic
          rates ( > 4 Gbit/s) are only achivable with sync turned off.




          1 Reply Last reply Reply Quote 0
          • First post
            Last post