Packet loss on WAN causes internal network hiccup?
-
Last weekend I helped organize a lan party for 70 attendees and was evaluating pfsense.
Due to a faulty coax cable installation from the technician of our ISP who installed the modem the cable was loose, often causing packet losses between 5 to 15%.While I expected some potential issues with anything connecting to the internet, I was surprised to see that for a couple of seconds the web-interface of pfsense was unresponsive. Traffic between Vlans which didn't need to connect to the internet also had a temporary hiccup.
When looking at the logs, I noticed that when the packeloss threshold was reached, pfsense reloads its filters.
I can imagine this being by design in order to switch over to another WAN link in a multiwan scenario.
Is this something expected? I think a workaround for this would be to either change the thresholds, set the interface to be regarded as always up, or disable gateway events.
-
You can change the thresholds and or even disable it from resetting states, etc. But yeah out of the box if wan goes down (high loss) then states will be reset.
Configure pfsense for best setup for your environment is up to you.. Its impossible to have an out of box config that is optimal for every single possible scenario.
-
@johnpoz thank you for your reply. I'm fairly new to pfsense and this was my first time using it in a real live scenario. I had suspicion about that being the reason, makes a lot of sense now, will be something I indeed will need to keep in mind :)
