<![CDATA[Lossy Tunnelbroker, is it normal?]]>I've been finding in red (loss higher than 50%) the Tunnelbroker IPv6 gateway recently.

Screen Shot 2021-10-06 at 12.27.36.png
(...and moments later:)
Screen Shot 2021-10-06 at 12.28.42.png

It appears to happen when I first load the dashboard but I'm not sure if that is it's related (I've noticed the firewall's GUI is heavy on the browser's host's CPU) I'm not sure if it's the firewall low on resources or if it's the tunnel. I've been trying to stress the tunnel with connectivity test sites and speed test sites but nothing seems to stress it, the IPv6 link will go [almost] as fast as the fastest server I can find to test with.

On the other hand, just now I'm connected to the forum on IPv6 and randomly I'm getting disconnection pop-ups in the corner of the webapp.
Screen Shot 2021-10-06 at 12.39.23.png

I did make one change to the network recently: IPv6 traffic was being blocked by the switches' multicast aids (snooping, querier, routing, etc) so while I learn how to deploy them properly in a non-Cisco mixed brand environment I turned it all off. I don't think the load increase was significant without multicast filters but, if it were, the WAN side of the firewall would be susceptible to it as it's on a router-on-a-stick setup.

This is the current traffic —or lack thereof— of the switch that connects to the main hypervisor, main storage server, and that has the LACP link to the firewall:
Screen Shot 2021-10-06 at 12.55.54.png

Any advice?

]]>https://forum.netgate.com/topic/167032/lossy-tunnelbroker-is-it-normalRSS for NodeWed, 17 Jun 2026 06:58:14 GMTWed, 06 Oct 2021 19:32:25 GMT60<![CDATA[Reply to Lossy Tunnelbroker, is it normal? on Thu, 07 Oct 2021 08:24:51 GMT]]>@skilledinept

If you know the issue isn't local, check alsways this page https://www.tunnelbroker.net/status.php. the he.net.ipv6 POPs can have issues.
For example, right now, the a UK-LONDON POP has been moved to Dusseldorf, Germany.
While we can't see the 'load' of these servers, it will be a factor.

All my IPv6 traffic goes out over the he.net.ipv6 link, and it's pretty stable. I'm using their services for many years now.

edit : also check out the he.net support forum.

]]>https://forum.netgate.com/post/1004772https://forum.netgate.com/post/1004772Thu, 07 Oct 2021 08:24:51 GMT