Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSence enabled firewall limits speed

    Scheduled Pinned Locked Moved Firewalling
    3 Posts 2 Posters 471 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F Offline
      Fluky
      last edited by

      Hi, I have installed PfSence on my machine, i have 2x10Gbit/s uplinks to this server via Intel nic.
      When i test network speed with disabled firewall from System > Advanced, it has very low load and can
      use whole my connectivity (but still uses that 2 threads). But with firewall enabled, it can use only 2-3gbit/s and it uses only last 2 threads. (other cpu usage is from speedtest)
      cbf3118c-083a-4088-9c2c-a333e03cc0c5-image.png
      Can be firewall configured to use all threads and not only 2? When that 2 threads are used, the whole connectivity starts to lag and ping is growing.
      Thanks

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator @Fluky
        last edited by johnpoz

        @fluky I don't believe pfsense can actually do 10ge, pretty sure one of the reasons they came out with TNSR

        What hardware you running this on?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 25.07.1 | Lab VMs 2.8, 25.07.1

        F 1 Reply Last reply Reply Quote 0
        • F Offline
          Fluky @johnpoz
          last edited by

          @johnpoz 5d85a752-0011-45cd-a961-1eafde07b698-image.png
          Here is screenshot, i can get with disabled firewall more than 15Gbit/s, and I have two Intel(R) Xeon(R) CPU E5-2650L v2 @ 1.70GHz
          I want to use firewall only for geoip blocking (PfBlocker).

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.