Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Some questions please

    Scheduled Pinned Locked Moved General pfSense Questions
    40 Posts 5 Posters 4.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      iammike @johnpoz
      last edited by

      @johnpoz

      Thx for the confirmation.

      Now I have to start arguing with my friend on who is going to change their network ๐Ÿ˜

      Thx again, really appreciated.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @iammike
        last edited by

        There are ways around it with nat.. But why, when you both should change to something not so "common"

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        I 1 Reply Last reply Reply Quote 0
        • I
          iammike @johnpoz
          last edited by

          @johnpoz said in Some questions please:

          There are ways around it with nat.. But why, when you both should change to something not so "common"

          Thx, but no I don't want that (read: ways around it). I am just experimenting with this (on the ASUS) till the pfsense arrives, and this exercise was a good learning experience.

          And using the pfsense for this will be the goal (and I think my friend is going to order one as well) and the ASUS will end up being only a Wifi AP.

          So any range in the 10.0.0.0 would do?

          For example

          Me 10.124.0.0/24 and him 10.95.0.0/24 ?

          Ps: Why these numbers they are our house numbers ๐Ÿ˜

          1 Reply Last reply Reply Quote 0
          • Cool_CoronaC
            Cool_Corona
            last edited by

            ASUS routers get regular updates as well as pfsense.

            They have WIFI built in andcan do MESH which is important if you have a multistory house.

            Pfsense is a homelab/small business firewall and nothing else.

            I 1 Reply Last reply Reply Quote 0
            • I
              iammike @Cool_Corona
              last edited by

              @cool_corona said in Some questions please:

              ASUS routers get regular updates as well as pfsense.

              They have WIFI built in andcan do MESH which is important if you have a multistory house.

              Pfsense is a homelab/small business firewall and nothing else.

              Thx for your comments, but

              • I think the pfsense is a better firewall then the Asus (and it also has more options for example the ASUS VPN server only has PPTP and OpenVPN) and reading the threads on here, I think I am right about this!

              • I will keep the Asus but only as a WIFI AP (and my RT-Ac58u though it supports OpenWrt (and the installation goes way over my head (this requires soldering a pin header on the router PCB.) https://openwrt.org/toh/asus/rt-ac58u

              • Even if the Pfsense is only a small business firewall I don't mind spending the 179 USD (exclu Shipping) to try to know a bit better or I could have saved 179 USD and bought something on AliExpress but Id rather have the real deal to tinker with.

              Maybe it's not right for me but I really don't mind the learning experience in doing so! And thanks to @johnpoz and @JKnott and the whole forum I think I am getting my monies worth

              ๐Ÿ˜˜

              Cool_CoronaC 1 Reply Last reply Reply Quote 0
              • Cool_CoronaC
                Cool_Corona @iammike
                last edited by

                @iammike

                Do yu plan to use many VPN services at any given time?

                ASUS supports OpenVPN and it doesnt fit your purpose?

                I 1 Reply Last reply Reply Quote 0
                • I
                  iammike @Cool_Corona
                  last edited by iammike

                  @cool_corona said in Some questions please:

                  @iammike

                  Do yu plan to use many VPN services at any given time?

                  ASUS supports OpenVPN and it doesnt fit your purpose?

                  Maybe not, but am I not allowed to use the pfsense for this and must I use the Asus just because I have it?

                  Just want to expand my experience/knowledge

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @iammike
                    last edited by johnpoz

                    @iammike said in Some questions please:

                    just because I have it?

                    Yes - your not allowed to switch your devices. Once you buy X, your locked in to using X forever. You can never switch brands, you can never move to more feature rich anything..

                    You can never out grow this device X, and must use it now until the end of time.

                    Nor can you leverage it anything else but your 1 everything box /S

                    Did you not read the small print on the EULA you agreed to when you fired it up the first time? hehehe

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    I 2 Replies Last reply Reply Quote 0
                    • I
                      iammike @johnpoz
                      last edited by iammike

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • I
                        iammike @johnpoz
                        last edited by iammike

                        @johnpoz said in Some questions please:

                        @iammike said in Some questions please:

                        just because I have it?

                        Yes - your not allowed to switch your devices. Once you buy X, your locked in to using X forever. You can never switch brands, you can never move to more feature rich anything..

                        You can never out grow this device X, and must use it now until the end of time.

                        Nor can you leverage it anything else but your 1 everything box /S

                        Did you not read the small print on the EULA you agreed to when you fired it up the first time? hehehe

                        Maybe you should explain that to the other guy ๐Ÿ˜‰

                        I 1 Reply Last reply Reply Quote 0
                        • I
                          iammike @iammike
                          last edited by iammike

                          We changed my friends local subnet to 10.95.0.0/24 and it works perfectly when connecting from my house. But the speed (for example FTP) is very slow only a max of 3Mib. (FYI: Our internet speeds are way faster than that) So that is barely enough to use Plex :๐Ÿ˜ž

                          Maybe this has to do with the Openvpn that is available on the Asus as all our Nics are capable of 1Gib, so can't wait to test the Netgate 1100 ๐Ÿ˜

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @iammike
                            last edited by

                            @iammike said in Some questions please:

                            is very slow only a max of 3Mib.

                            What are the speeds of the 2 different connections? If site A upload is X, then site B would only be able to download at X-overhead..

                            Your speed is going to be limited by many factors, but you can not download faster than what it can be sent at - regardless of your servers local interface speed..

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            I 1 Reply Last reply Reply Quote 0
                            • I
                              iammike @johnpoz
                              last edited by iammike

                              @johnpoz said in Some questions please:

                              @iammike said in Some questions please:

                              is very slow only a max of 3Mib.

                              What are the speeds of the 2 different connections? If site A upload is X, then site B would only be able to download at X-overhead..

                              Your speed is going to be limited by many factors, but you can not download faster than what it can be sent at - regardless of your servers local interface speed..

                              I understand, but my speed is (+/-) 300/300 and his speed is (+/-) 1000/500! (Both on Fiber)

                              His upload to for example Onedrive is around 42MiB

                              Edit: I am regularly downloading stuff from a friends site back in Europe and I sometimes reach speeds of 10MiB+/- (and this was before the speed increase)

                              edit2: I don't know if it helps, but this is a ping (when the vpn is active) to his router

                              Pinging 10.95.0.1 with 32 bytes of data:
                              Reply from 10.95.0.1: bytes=32 time=18ms TTL=64
                              Reply from 10.95.0.1: bytes=32 time=18ms TTL=64
                              Reply from 10.95.0.1: bytes=32 time=18ms TTL=64
                              Reply from 10.95.0.1: bytes=32 time=18ms TTL=64

                              Ping statistics for 10.95.0.1:
                              Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
                              Approximate round trip times in milli-seconds:
                              Minimum = 18ms, Maximum = 18ms, Average = 18ms

                              johnpozJ 1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @iammike
                                last edited by johnpoz

                                Well the latency is good, and if your speeds are both that high.. Then yeah something else holding it back.. While there is some overhead with vpn, it wouldn't account for such a drastic reduction.

                                What are the 2 boxes working as the vpn devices in this case - both asus routers?

                                Take the vpn out of the equation for a test. And just ftp via your normal connection.. This will take your ftp server, disk, and the like out of the equation for what could be slowing it down.

                                If you get X without vpn, and then only Y with the vpn - then yeah you know its something with the vpn.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                I 1 Reply Last reply Reply Quote 1
                                • I
                                  iammike @johnpoz
                                  last edited by

                                  @johnpoz said in Some questions please:

                                  What are the 2 boxes working as the vpn devices in this case - both asus routers?

                                  Yeah both are ASUS one is RT-AC67U and the other a RT-AC58U

                                  @johnpoz said in Some questions please:

                                  Take the vpn out of the equation for a test. And just ftp via your normal connection.. This will take your ftp server, disk, and the like out of the equation for what could be slowing it down.

                                  If you get X without vpn, and then only Y with the vpn - then yeah you know its something with the vpn.

                                  Will report back, have to test this and need some more port forwarding to do this, because all traffic is going through the VPN now.

                                  Thx

                                  I 1 Reply Last reply Reply Quote 0
                                  • I
                                    iammike @iammike
                                    last edited by iammike

                                    Finally had some time to test this.

                                    VPN Server via Asus - FTP download speed around 3Mib
                                    NO VPN Server - Port forwarding Ftp around 5 Mib

                                    Now we also tried it with a higher spec router (instead of the AC-56U we used a ASUS AC-86U) and the speed were only a bit better.

                                    VPN Server via Asus - Ftp download speed +- 4 MiB
                                    No VPN Server - Port forwarding FTP speed +- 7Mib

                                    Now I just recently received my package from the US with the SG-1100 and going to set it up at my friends house and put the Netgate in the DMZ of his ISP Router (Non Bridged) and see what that brings us. (speed wise)

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.