Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Pfsense Internet Download Slow

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    27 Posts 6 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      So what does the WAN interface show when connected to the modem directly?

      Have you tried setting that to a fixed speed? I doubt it's a problem with the LAGG side.

      You can try running a speed test from the firewall itself to be sure though.
      See: https://forum.netgate.com/post/781548

      Steve

      1 Reply Last reply Reply Quote 0
      • R
        Rickinfl
        last edited by

        Status
        up
        DHCP
        up Relinquish Lease
        MAC Address
        xxxxxxxxxx
        IPv4 Address
        xx.xx.xx.xx
        Subnet mask IPv4
        255.255.254.0
        Gateway IPv4
        xx.xx.xx.x
        IPv6 Link Local
        xxxxxxx
        DNS servers
        8.8.8.8
        MTU
        1500
        Media
        1000baseT <full-duplex>
        In/out packets
        125527658/65976060 (167.51 GiB/4.10 GiB)
        In/out packets (pass)
        125527658/65976060 (167.51 GiB/4.10 GiB)
        In/out packets (block)
        55698/84 (15.42 MiB/11 KiB)
        In/out errors
        0/0
        Collisions
        0

        1 Reply Last reply Reply Quote 0
        • R
          Rickinfl
          last edited by

          [2.4.3-RELEASE][root@pfSense.home.lan]/root: speedtest-cli
          Retrieving speedtest.net configuration...
          Testing from Spectrum (xx.xx.xx.xx)...
          Retrieving speedtest.net server list...
          Selecting best server based on ping...
          Hosted by Hivelocity Hosting (xxxxxxx) [17.89 km]: 129.495 ms
          Testing download speed................................................................................
          Download: 284.77 Mbit/s
          Testing upload speed................................................................................................
          Upload: 23.46 Mbit/s

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by Derelict

            So it's on the LAN side.

            Maybe eliminate all that LAGG stuff or at least directly connect to a single interface on the inside and test from there.

            129.495 ms That is a lot.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • HermanH
              Herman
              last edited by

              Hello everybody,

              Experiencing kind of same problem. See my post:

              https://forum.netgate.com/topic/133567/wan-speed-drops-significantly-when-downloading-large-10-gb-files.

              The physical network card is an Intel(R) Ethernet Server Adapter I350-T4. The switch used is a HP 1810-24G. No crappy hardware I would say.

              Still looking for a solution,

              Regards,
              Herman

              Limburg | The Netherlands.
              It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

              1 Reply Last reply Reply Quote 0
              • R
                Rickinfl
                last edited by

                It's not going through the LAGG right now I have it connected to a single card. I did get 300 Down when I hard wire connected my laptop so it seems to be working. Also set WAN to 1000 Full Duplex.

                Herman, I did a speed test getting over 300 down, but my Pfsense box Graph only showed about 50 like yours.

                GrimsonG 1 Reply Last reply Reply Quote 0
                • GrimsonG
                  Grimson Banned @Rickinfl
                  last edited by

                  @rickinfl said in Pfsense Internet Download Slow:

                  Herman, I did a speed test getting over 300 down, but my Pfsense box Graph only showed about 50 like yours.

                  So, is the Graph set to bytes or bits? If you don't know the difference it's high time to learn it.

                  1 Reply Last reply Reply Quote 0
                  • HermanH
                    Herman
                    last edited by

                    @Rickinfl My graph shows MB's (MegaBytes). The problem is that my download is not consistent as you can see in the graph. It suddenly drops en is very inconsistent.

                    Maybe very stupid to ask but what do you mean with LAGG?

                    Regards,
                    Herman

                    Limburg | The Netherlands.
                    It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

                    R 1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      If you are not doing a LAGG you don't have to worry about it.

                      https://en.wikipedia.org/wiki/Link_aggregate_group

                      What you are seeing in that graph would be indicative of irregular sending by the sender, or possibly something going on on the receiver, not anything on the firewall. Maybe something upstream starts to limit you or any one of 100 different things.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • R
                        Rickinfl @Herman
                        last edited by

                        @herman said in Pfsense Internet Download Slow:

                        @Rickinfl My graph shows MB's (MegaBytes). The problem is that my download is not consistent as you can see in the graph. It suddenly drops en is very inconsistent.

                        Maybe very stupid to ask but what do you mean with LAGG?

                        Regards,
                        Herman

                        LAGG. I have a I350-T4 I took all 4 ports and created a LAGG which combines all 4 ports into 1. So basically I have a 4 GIG link. On my Cisco 3750G I created a LACP Trunk which is basically a LAGG, but in Cisco words. This allows me to send VLANS across to the Pfsense box. I also created VLANS in Pfsense.

                        HermanH M 2 Replies Last reply Reply Quote 0
                        • HermanH
                          Herman @Rickinfl
                          last edited by

                          @rickinfl Okay... I need the ports also for the vm's. The SuperMicro board has also 2 Intel nics on board.

                          But any idea whats going on with the speed?? Before I migrated from the TMG 2010 I've had an stable download.

                          Regards,
                          Herman

                          Limburg | The Netherlands.
                          It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            @rickinfl said in Pfsense Internet Download Slow:

                            It's not going through the LAGG right now I have it connected to a single card. I did get 300 Down when I hard wire connected my laptop so it seems to be working. Also set WAN to 1000 Full Duplex.

                            I would leave that at Default (no preference, typically autoselect)

                            By running the speed test on the firewall and getting Download: 284.77 Mbit/s you have established it is not the WAN interface.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            1 Reply Last reply Reply Quote 0
                            • M
                              moikerz @Rickinfl
                              last edited by

                              @rickinfl said in Pfsense Internet Download Slow:

                              LAGG. I have a I350-T4 I took all 4 ports and created a LAGG which combines all 4 ports into 1. So basically I have a 4 GIG link.

                              (Pedantic) Err, no. You still have a 1Gbps link for a single flow, but you can handle up to 4 single flows simultaneously at 1Gbps, and anything above 4 flows will start to share bandwidth. But you'll never get 4Gbps in a single flow.

                              And remember (I'm just stating, not accusing) - if you have your graph at MBps instead of Mbps, then a 300Mbps link should show up as roughly 35MBps.

                              1 Reply Last reply Reply Quote 0
                              • GrimsonG
                                Grimson Banned
                                last edited by

                                If you have 4 or less LAN segments you can also use them as individual interfaces instead of a LAGG with VLANs. This way you don't have to deal with possible issues in the LAGG driver and reduce the complexity of the config.

                                1 Reply Last reply Reply Quote 0
                                • HermanH
                                  Herman
                                  last edited by Herman

                                  Hi guys,

                                  Looked around a bit for myself. Would like to receive your thoughts about this.
                                  Using Sabnzbd for large UseNet downloading. I’ve add 3 UseNet server with each 16 connections. Playing around with this made me conclude the following. Enable just one UseNet pay server with only 4 connections is giving me the best performance. About 35MB generally over the whole download. There are some moments that the speed drops to 0 but then it resumes to the speed of approximately 35 MB. Does this make any sense to you guys? I’d like to understand what’s going on here.

                                  Like noted before I use a HP 1810-24G managed switch. There are tons of settings that can be made. My knowledge is not that far to understand all of them. For example the Jumbo Frames, should they be enabled or disabled? For now I enabled them to see what it does to the performance. The link speed of the switch is now ‘auto”. Should I set it to “1000 Full Duplex”?

                                  Any thoughts of how to configure the switch to get the best performance? All tips would be appreciated!

                                  Kind regard and thanks for helping already,
                                  Herman

                                  Limburg | The Netherlands.
                                  It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    Maybe they are throttling with you in some way when you start increasing the number of connections. Maybe your client starts having problems. I cannot see pfSense caring one way or the other.

                                    You shouldn't need to do anything on the switch.

                                    i wouldn't touch jumbo frames in your environment. Leave everything 1500.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    HermanH 1 Reply Last reply Reply Quote 0
                                    • HermanH
                                      Herman @Derelict
                                      last edited by

                                      @derelict

                                      Thank you @Derelict for the reply. I will turn the jumbo frames back to off. I have no clue if the news hosting provider (https://www.newshosting.com/) is throttling when I increase the connections. My peasant wit would say the more connections the more speed you can gain? Well probably that seems not to be the case.

                                      What would be the advice in using connections? Just use one server with one connection? Why does the provider offer 30 connections in the first place?

                                      Kind regards,
                                      Herman

                                      Limburg | The Netherlands.
                                      It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

                                      HermanH 1 Reply Last reply Reply Quote 0
                                      • HermanH
                                        Herman @Herman
                                        last edited by

                                        Also found this link https://www.newshosting.com/usenet/usenet-connections/. This explains how connections works. Just didn't figure out how to test the ideal amount of connection in combination with a speed test...

                                        Just wanted to share this aswell.

                                        Herman

                                        Limburg | The Netherlands.
                                        It is nice to be important. But it is more important to be nice! | Failure, the best teacher it is!

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.