Slow Download speed behind pfSense



  • Hello Everyone.

    I recently installed pfSense inside my network. everything seems to be working fine except for the issue that i have right now.

    Connecting any LAN Client directly to the cable/modem i get a solid 50Mbps doing a speedtest connectivity.

    However, behind pfSense i usually get 20Mbps to 25 Mpbs.
    0_1531171537339_img_x7.PNG

    Both NICS WAN and LAN are 10/1000 no adapters of some kind connected.
    There's no package at all installed in the pfSense instance. or any traffic analyzer / Traffic shap.

    Hope you can help me. Thanks!

    Adrian.


  • Netgate Administrator

    You are testing just using Speedtest.net from a client behind pfSense? Not the host?

    What does the CPU usage look like in pfSense when running that? Or on the host box?

    Steve



  • First, I would double and triple check that you don't have any traffic shaping or limiters configured. Check all 3 tabs under Firewall -> Traffic Shaper

    Next, I would replace both your NIC's with Inel Gigabit NIC's. Using cheap NIC's with a software-based chipset will contribute to the behavior you're seeing behind PFsense.

    Also, any chance you have all your traffic routed through a VPN service? If so, running PFsense on hardware that doesn't support AES-NI can contribute to your issue as well.


  • Netgate Administrator

    Pretty sure this is still running in VirtualBox, right?

    Steve



  • If you are running pfSense virtualised (I'm using xcp-ng) then you may need to disable tcp offloading on the VM. Fixed my problems when I had slow downloads and some inaccessible websites, while uploads appeared to be fine. If CPU usage is appears high for the amount of traffic you are moving, that's probably your culprit.



  • @tdcockers said in Slow Download speed behind pfSense:

    If you are running pfSense virtualised (I'm using xcp-ng) then you may need to disable tcp offloading on the VM. Fixed my problems when I had slow downloads and some inaccessible websites, while uploads appeared to be fine. If CPU usage is appears high for the amount of traffic you are moving, that's probably your culprit.

    @tdcockers I'm thinking of using xcp-ng here shortly once my employers main server is decommissioned and they donate it to me. Anything I should know ahead of time? I have never worked with any virtualization, just something to try in my homelab.