Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiwan failover takes a long time to switch over

    Scheduled Pinned Locked Moved Routing and Multi WAN
    7 Posts 4 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      ev89pimp
      last edited by

      Greetings,
          I'm evaluating the multiwan capabilities of pfSense and I'm noticing that it takes a very long time to failover from a primary interface to the failover interface. My load balance pool is setup in failover mode. I'm testing switchover times using pings to various IP addresses.

      Is this normal or are there additional settings I can tweak?

      Thanks!

      1 Reply Last reply Reply Quote 0
      • S
        sai
        last edited by

        how long does it take? pfsense should ping the target every 5 seconds and that is how long it takes to switchover.

        1 Reply Last reply Reply Quote 0
        • E
          ev89pimp
          last edited by

          For testing, I had maintained a ping to a well-known DNS server on the Internet. I disconnected the primary WAN interface on my pfsense box and expected the pings to timeout for a few rounds, but then resume on the failover interface.. This didn't happen.. Once I stopped the pings and started pinging another well-known dns server, pings to the other DNS server came back fine and routed through the failover.

          So what I'm really trying to say is it didn't seem like pfsense failed over to the backup wan until I started a new connection to a different Internet address.

          1 Reply Last reply Reply Quote 0
          • S
            sai
            last edited by

            existing connections are not rerouted. they just timeout and have to be re-established.

            once an ISP is down, all new connections would go through the other ISPs.

            1 Reply Last reply Reply Quote 0
            • P
              Perry
              last edited by

              Search for afterfilterchange if it should be a problem (added in the fit123 package for pfsense1.2.3)

              /Perry
              doc.pfsense.org

              1 Reply Last reply Reply Quote 0
              • E
                ev89pimp
                last edited by

                Thanks for the responses. I'm going a different route now regarding maintaining high availability on vpn tunnels.. will hold out for 1.2.3 and try multi-wan again.

                Cheers

                1 Reply Last reply Reply Quote 0
                • I
                  Itwerx
                  last edited by

                  MultiWAN failover works fine but you have to be very careful about your monitoring IPs.  See the "If a connection is red (down) for no apparent reason" section of this page in the wiki:
                    http://doc.pfsense.org/index.php/Troubleshoot_Outbound_Load_Balancing_Issues
                  …it applies to your issue as well.

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.