internet slow upload

[jacquesh]

My ISP delivers me an 100Mb internet connection. My download is fine but my upload is not getting above 15Mb.
My ISP says i have to configure traffic shaping to fix this.

I allready tried traffic shaper to configure 96Mb up and down but i cannot get this fixed.

[DaddyGo]

@jacquesh

hi,

what kind of ISP package is this?
symmetrical D / U? (100/100)

"My ISP says i have to configure traffic shaping to fix this."
this is not a baseline anyway - traffic shaping

can we get more information than, what you have described so far?

-ISP device / description of your device
-connection methods (ONT, modem, modem / router, etc.)
-connection protocol (DHCP, PPPoE, IPoE, etc.)
-packages installed on pfSense
-measurement method

[jacquesh]

@DaddyGo the package is 100/100

-ISP device: cisco (i do not know the type) port configured as 100mb full duplex
-description of your device: apu3c4 APU.3C4 system board 4GB
-connection methods: cisco device -> pfsense -> switch
-connection protocol (DHCP, PPPoE, IPoE, etc.): PPPoE
-packages installed on pfSense: only cron is installed
-measurement method: speedtest.net

im sure the problem is the traffic shaping / speed duplex settings. but i do not know how to fix it.

[DaddyGo]

@jacquesh said in internet slow upload:

traffic shaping

Hi,

by default it's not necessary "traffic shaping", I don't even understand why this ISP wrote this
.......imagine that on every subscriber endpoint, such things should be applied
-many SOHO devices do not even know this feature!!!

the type of Cisco device (ISP CPE) is important, you can find the type on the equipment data label
important because, we need to know the maximum port speed

-can you send a "prtsc" about the status of the WAN interface?

I am familiar with APU (pcEngines) MOBOs
it can last a long time, but we find the bottleneck

[jacquesh]

@DaddyGo i am not at the office right now, i will check the type later!

here is the printscreen

login-to-view

[DaddyGo]

@jacquesh

I was curious about MTU
(but this (1492) is okay because PPPoE)

I suggest the following:
prepare a desktop / laptop computer and connect directly to Cisco stuff (Cisco - Cat5e (minimum) - laptop / desktop)

set up your PPPoE connection and let's see what other values you get
please use these measurement options:
https://www.nperf.com/en/

or
https://fast.com/
(personally i don't like speedtest net)

this will filter out the possibility of a pfSense issue
the type (Cisco) is needed to see the issue of negotiating automatic speeds on ports

we are waiting for this data (Cisco) and test results (direct PPPoE)

[jacquesh]

Hi,

sorry for my late responce, ik had to pick a moment i could disconnect internet for a moment :)

the cisco is an: Cisco ASR920

when i disconnect the pfsense and connect my laptop i'm getting the following speedtest results:

up 87,27 down 71,73

i did a few and all results were around 80/90

[DaddyGo]

@jacquesh

@jacquesh "sorry for my late responce, ik had to pick a moment i could disconnect internet for a moment :)"

I understand, the family can be dangerous.....

• if you can wait a while, I'm looking for an old APU4d4 tomorrow and I will send the exact NIC tuning settings

I think this will help

BTW:
@jacquesh "the cisco is an: Cisco ASR920"

do you really have a Cisco unit like this?
(this is not a typical ISP CPE device)

login-to-view

[jacquesh]

@DaddyGo

Hi, yes that would be great.

and yes that is really the cisco we got from our ISP :)

[Gertjan]

login-to-view

seems a bit high for pppoe. pppoe overgaed is more then 8 bytes, counting down from the default 1500.

Probably not related :

login-to-view

127.0.0.1 is ok.
The rest is not needed or even not advisable before full DNS knowledge is acquired.

[DaddyGo]

@jacquesh

In response to @Gertjan's suggestion, for safety, check the correct MTU using the following method.
(I note: 1492 is usually (good) enough for PPPoE.)
For example: https://www.tp-link.com/us/support/faq/190/

BTW:
Correct your DNS settings (currently pointing to localhost)
it is very likely that your trivially low UP speed is not caused by these,
but do your best, before we state this.

find the best DNS server(s) for your location, use this:
https://www.grc.com/dns/benchmark.htm

or

use the Unbound with the 13 root servers
https://www.iana.org/domains/root/servers

(before setting up your DNS system
find out on the internet, which DNS solution you would choose for privacy, etc.)

I know that, wasn't your original problem this, but in the meantime, these also came up.

[jacquesh]

just tested the correct mtu size. 1464 is the last good reply, add 28. so it should be 1492.

we are using an external dns filter. that is the reason it is configured this way.

[DaddyGo]

@jacquesh said in internet slow upload:

1464 is the last good reply, add 28. so it should be 1492.

I thought...

please give me some time and I will start the APU4d4 which I found in the warehouse
and I will send tweaks

maybe that will solve the issue

[DaddyGo]

@jacquesh

APU4d4 loader.conf.local:

legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1
hw.igb.rx_process_limit=-1
hw.igb.tx_process_limit=-1
hw.igb.rxd=1024
hw.igb.txd=1024
hw.igb.max_interrupt_rate=64000
net.pf.states_hashsize=524288
net.pf.source_nodes_hashsize=524288
net.inet.tcp.syncache.hashsize=2048
net.inet.tcp.syncache.bucketlimit=16
net.inet.tcp.syncache.cachelimit=32768

and (EEE, flow control, tryforward)

login-to-view

Latest BIOS:
https://pcengines.github.io/
login-to-view

and finally:
https://teklager.se/en/knowledge-base/apu2-1-gigabit-throughput-pfsense/

[jacquesh]

@DaddyGo said in internet slow upload:
just added this to loader.conf of shoeld it really be loader.conf.local? (i have to create it then?) and rebooted.

i added the rules from the screenshot. im on bios 4.0.7. i go and try to update this later. (hope tomorrow)

disabled hardware offloading.

for now upload is still the same.

[DaddyGo]

@jacquesh

*not loader.conf as it will be overwritten during OS update
you have to create it (just SSH into the box (WinSCP, Putty, etc.)
/boot/loader.conf.local

login-to-view

and REBOOT*

the BIOS is very important, this is a very outdated BIOS this can also be a problem
(the upgrade is not easy due to the known USB problem of APU MOBOs but if I fail I will help)

important: halt the system wait until 60 sec or more, disconnect PSU wait...wait.. and start

*turn them all off: (TSO, LRO is not good for you, if you are a router, if you are an endpoint can help)

login-to-view

REBOOT again!*
(This will take effect after a machine reboot or re-configure of each interface.)

+++edit:
don't forget System Tunable either
it is important to turn off flow control and EEE

"tryforward IPv4 and v6" can also be important, do it

[jacquesh]

hey in finely updated the bios, but results are stil the same.

download around 80/90 upload around 15/25

do you have more ideas?

[DaddyGo]

@jacquesh said in internet slow upload:

do you have more ideas?

this should work (above)...
did you do all the tweaks?
what applications are installed?

[jacquesh]

just saw my /boot/loader.conf.local is gone.

what is the best way to create this file?

[DaddyGo]

@jacquesh said in internet slow upload:

what is the best way to create this file?

this is the problem ....
if you are using a windows machine or....
https://winscp.net/eng/download.php
or
https://www.putty.org/

+++++https://notepad-plus-plus.org/downloads/

login-to-view

enable SSH towards the box....