IPSEC gateway loop and high latency



  • We have a PFsense as firewall+VPN and use IPSec to close a conection with our datacenter (Site to Site).
    We notice a high latency beetwen us and our servers on the datacenter.
    This wasn't happening before, the problem started about 1-2 months ago.
    The ping response stays on 150ms and if I run a traceroute I notice that it pass through the GW (192.168.0.254) - 0.358ms, loops again to the GW (192.168.0.254) but the response time is 160ms and then arrives on the other side with a response time of 164ms.
    I've ruled out hardware and firewall rules problems because I installed PFsense on another machine from scratch and did only the IPSec configuration, the results was the same.
    I attached a print with the results.

    FYI

    • PFSense 2.4.4-RELEASE-p3
    • Hardware
      CPU Type Intel(R) Xeon(R) CPU E5620 @ 2.40GHz
      8 CPUs: 1 package(s) x 4 core(s) x 2 hardware threads
      Memory - 16GB

    Any help is welcome... thanks everyone!!!
    ipsec.png



  • @rodrigocar said in IPSEC gateway loop and high latency:

    We have a PFsense as firewall+VPN and use IPSec to close a conection with our datacenter (Site to Site).
    We notice a high latency beetwen us and our servers on the datacenter.
    This wasn't happening before, the problem started about 1-2 months ago.
    The ping response stays on 150ms and if I run a traceroute I notice that it pass through the GW (192.168.0.254) - 0.358ms, loops again to the GW (192.168.0.254) but the response time is 160ms and then arrives on the other side with a response time of 164ms.
    I've ruled out hardware and firewall rules problems because I installed PFsense on another machine from scratch and did only the IPSec configuration, the results was the same.
    I attached a print with the results.

    FYI

    • PFSense 2.4.4-RELEASE-p3
    • Hardware
      CPU Type Intel(R) Xeon(R) CPU E5620 @ 2.40GHz
      8 CPUs: 1 package(s) x 4 core(s) x 2 hardware threads
      Memory - 16GB

    Any help is welcome... thanks everyone!!!
    ipsec.png

    Anyone can help me with that problem?


Log in to reply