Certain webpages and images slow to load or won't load at all

[Knots]

Hi all,

Hardware: SG4100
Software: pfSesnse+ 22.05

I'm having a strange issue where when I visit a website they'll be VERY slow (15+ seconds) to load and often times fail to load images on the page at all. This happens a good bit on Amazon, YouTube (with thumbnails) and Twitch, but isn't limited to those sites.

I don't have pfBlocker or anything installed. I'm using Google DNS servers for both ipv4 and ipv6. There is nothing strange in the Firewall logs. This is not limited to my main computer (Windows) as it happens on my MacBook and iPhone as well. I tested this by bypassing my pfSense Firewall and using and Omada Firewall and the problem is non-existent. Anyone have any ideas?

Twitch thumbnails failing to load:

Discord channel taking 20 seconds to load:

[stephenw10]

You may be seeing an IPv6 issue. That behaviour is typical of clients that have an IPv6 address and routes but lack some v6 connectivity.

[JKnott]

@stephenw10

Lack of connectivity where? The only time I've seen that sort of issue was when my ISP had IPv6 problems, but that was solid. I had valid IPv6 addresses on my LAN, but IPv6 traffic, all IPv6 traffic, couldn't make it back to my LAN due to that problem. It was very obvious and didn't affect just "certain webpages". In this situation, the app would try IPv6, time out, and revert to IPv4.

[stephenw10]

Yup, it will normally try to use v6 and if that fails it has to timeout and then try v4. But if you have partial connectivity it may fail only on some sites like that.

Otherwise check: https://docs.netgate.com/pfsense/en/latest/troubleshooting/website-access-issues.html

Steve

[johnpoz]

Just turn off IPv6 - does it work now? There you go you know where the problem is happening.

But doing a directed query to 1.1.1.1 which wouldn't be IPv6 and getting a timeout just seems like bad connectivity, or slow connection, are you routing through a vpn? Are you on sat connection?

You doing some odd redirection of dns traffic on pfsense?

Do you have isp or other router in front of pfsense doing dns redirection?