Losing my mind?
-
I run two SG-5100 routers, one locally and one back in the US, which I have connected via a site to site OpenVPN connection for the purpose of accessing network resources in the US, as well as for streaming Amazon Prime video etc. Devices that use this tunnel are either routed via PBR when accessing remote devices OR, they have a static IP and are part of an alias. Firewall rule on LAN has an accept source ALIAS to ANY and specifies using the Site to Site gateway. I can ping both sides, access network devices, and have a NAT rule on the remote end so that traffic can be routed to the internet on the US side. Everything about the Site to Site VPN is working as expected.
Additionally, on the local end, I run a PIA OpenVPN client that I use to bulk route my network traffic for privacy/anonymity reasons. Devices are routed over that path via a catchall rule at the bottom of the rule list which has a source ANY to destination ANY via PIA gateway rule. Everything had been working wonderfully since I started using PfSense years ago up until the other day when upgraded both to 21.02.
For some reason now, despite the connection between both ends being active and accessible, when I try to stream from my FireTV stick, it seems to just hang. The little blue circle indicator just spins and spins and spins until it tells me that I have a slow internet connection. Interface graph shows minimal activity. Every so often, things work. But, for the last few days, they mainly do not. Even more odd, if I create a rule that routes my laptop over the site to site gateway, I am able to get Amazon video and can watch a movie just fine on my computer. Speed test is great with 40+ Mbps, no complaints. But my FireTV, which is on the same subnet, is being wonky.
I can't point to data, but I feel like, since I upgraded, the router struggles with figuring out which gateway to use to send traffic (local WAN, PIA VPN, or Site to Site VPN).As a precaution I even set the default gateway to WAN rather than automatic. I know there have been tons of postings about OpenVpn issues and figured I'd ask if anyone else had seen something similar or if there is a bug I haven't seen a posting on. A reliable fix would be amazing.
I run minimal packages, Avahi, OpenVPN client export, PfBlockerNG_dev...nothing that hasn't been in place for years. Would greatly appreciate any ideas or troubleshooting others might have.