Issue with internet speed

johncsuti

Hello,

I am having an issue that has been racking my brain for a while now, and finally thought to ask here. This all started when i decided to setup VLAN's. I am paying my ISP for 100Mbps and i get it at the modem. Once it hits pfsense its dropped down to around 10-30Mbps depending on the noise in the universe. Im not sure what to think about this.

My pfsense may be bottle necked for what im attempting to run consisting of a Core i5 6400T and 8Gb of ram. The OS is also running off of a 120Gb SSD. Currently i have configured 2X 10Gbps spf+ ports running in LAGG with LACP selected. I also have 4 VLANS. I dont think the pfsense server is lagging but im not sure. The GUI shows 1% usage on CPU and 5-8% usage on RAM. Maybe if i remove a 10Gbps link it would improve? Currently on the GUI it shows ixl0 (Collecting, Distributing), ixl1 (Active, Collecting, Distributing), igb1, igb2.

The only thing i am able to find is when i shutdown 3 of my LXC's on proxmox the speed jumps up a ton but those are limited to 1MB and should not be affecting it much. Also the GUI shows at max 3MB on that VLAN both ways. Maybe i have somthing wrong with my VLAN's?

Current VLAN configuration is set that pfsense does all the routing since i want to prevent intervlan router where needed. I do have a L3 switch that doesn't let me prevent intervlan routing.
VLAN priority's set as:
VLAN : Priority
1 : 7
10 : 6
20 : 5
30 : 7

Any pointers or help on this issue would be amazing and much appreciated.
-John

johncsuti

This post is deleted!

JKnott

@johncsuti

I run pfsense on an i5 with 4 GB of memory and it has no problem delivering over 500 Mb down. What you can do is try to isolate the problem. For example, you could disable everything thing but the WAN and LAN ports. Then add the others one at a time. The VPNs shouldn't cause much of a load unless actually in use. Hopefully, that i5 supports the AES-NI instructions and you have them enabled.

johncsuti

@jknott i5 supports AES-NI CPU Crypto so yes it does and by VPN do you mean VLAN's?

johncsuti

@jknott I was able to narrow it down to a single VLAN running 3x TOR exits not sure why they would be killing the speed since they are limited to 1Mbps up and 1Mbps down. The VLAN that they are on also has a traffic limiter of 10Mbps but crushing the speed way down to around 10 down when it is limited? the traffic graphs also show only around 2-3Mbps in and out bond. Even that having the VLAN disabled on pfsense only speeds it up to around 85-90 not the full 105 that the modem is getting.

johncsuti

JKnott

@johncsuti

Sorry, my mistake. I thought I saw VPN in there, but it must have been a different thread.

johncsuti

@jknott Thats quite alright any ideas on why it would be killing the whole internet connection while its limited.

JKnott

@johncsuti

No idea.