Bandwidth issue behind PfSense
-
So I've been using PfSense for about two years now and just recently started having an issue with WAN speeds. I use a cellular plan for internet that is running through OpenWRT to act as the modem since PfSense has limited cellular support. So I noticed my speeds on speedtest.net have been low and so I decided to test straight off OpenWRT and I get around 150mbps but behind PfSense I only get around 35mbps and that's new because it's always been around the 120 to 150 mark. So I thought maybe it was a setting and I had a spare PC and quad intel nic laying around so I just built a different fresh PfSense box and it does the exact same thing. So I don't know why it's happening but if I just plug straight into OpenWRT I get the correct speeds so I don't know if OpenWRT is throttling PfSense in some way or if PfSense is causing the issue. Any suggestions? It's driving me crazy.
-
Mmm, 35Mbps is significantly slower. Do you have any shaping configured?
Check the Status > Interfaces page, make sure it's linked at 1G full duplex.
One thing you can probably try is running an iperf test to/from OpenWRT directly to eliminate the actual cellular link. I'd expect to see 100s of Mbps there unless there's a link issue.
Steve
-
@stephenw10 Thanks for the response. I do have some shaping configurations so I thought that is what might have been going on initially. That's why I built the other PC and loaded up a fresh install, to eliminate any settings I may have as a possibility. In my main appliance I have a Chelsio 10gb card but the openwrt modem only has the 1gb interface so under status > interfaces it shows 1000 base-t under WAN. I will try the iperf test, hopefully that might point me in the right direction. It's just weird that it happens on two different pieces of hardware but not on a client PC plugged directly in.
-
@stephenw10 Here's the results using the OpenWRT as the server and the PfSense as a client.
Connecting to host 192.168.111.1, port 5201
[ 5] local 192.168.111.184 port 21672 connected to 192.168.111.1 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 3.36 MBytes 28.2 Mbits/sec 11 22.7 KBytes
[ 5] 1.00-2.00 sec 2.86 MBytes 24.0 Mbits/sec 9 1.41 KBytes
[ 5] 2.00-3.00 sec 2.88 MBytes 24.2 Mbits/sec 8 27.0 KBytes
[ 5] 3.00-4.00 sec 2.88 MBytes 24.1 Mbits/sec 9 25.5 KBytes
[ 5] 4.00-5.00 sec 2.87 MBytes 24.1 Mbits/sec 9 25.5 KBytes
[ 5] 5.00-6.00 sec 2.88 MBytes 24.1 Mbits/sec 9 24.1 KBytes
[ 5] 6.00-7.00 sec 2.86 MBytes 24.0 Mbits/sec 9 24.1 KBytes
[ 5] 7.00-8.00 sec 2.87 MBytes 24.1 Mbits/sec 9 19.8 KBytes
[ 5] 8.00-9.00 sec 2.87 MBytes 24.1 Mbits/sec 9 17.0 KBytes
[ 5] 9.00-10.00 sec 2.82 MBytes 23.6 Mbits/sec 8 25.5 KBytes
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 29.1 MBytes 24.4 Mbits/sec 90 sender
[ 5] 0.00-10.06 sec 28.6 MBytes 23.9 Mbits/sec receiverIt seemed a little low so I thought maybe it was the link so I decided to build another OpenWRT system and I used a NUC10 which should have plenty of headroom and am getting the same result I just don't get it. I put OPNSense on the other system I had put the fresh install of PfSense and and I don't have an issue. Speeds are good. So it's just something with PfSense. I have to be missing something here.
-
Speeds that low look like a link speed/duplex mismatch somewhere if you have removed the shaping. So look for something failing at layer1.
