Settings for the most responsive browsing?

SteveITS

@octopuss No, but normal resolution is maybe 50 ms give or take a few dozen ms so a delay of 1000-2000 ms is usually noticeable.

Octopuss

@steveits Ok, I tried a few websites I haven't visited for months at least, and even for those I believe are in the U.S., the response was pretty much instant.

SteveITS

@octopuss Then if it was me, I would look at browser plugins, try a private browser window, different browser, different PC, etc.

Octopuss

@steveits No browser plugins that would affect networking (well, Ublock Origin, but that should in fact improve responsiveness), and Firefox seems to load pages about the same...

johnpoz

@octopuss I will have to look into this pale moon, if they have stated they are not ever going to support doh?

As mentioned use another browser - pale moon is based off mozilla, does it have the dev tools - so you can see exactly what is taking exactly how long to load..

Octopuss

@johnpoz Some info is on its website: https://www.palemoon.org/info.shtml

I only know there is nothing called doh in the settings. Web development and programming is total klingon to me.

And I did look at the console, but I don't really know what to look for. I am a completely basic user when it comes to these things.

Pages seem to load exactly the same in Edge too.

johnpoz

@octopuss here for example - you can see exactly what took how long to load, how much was transferred and how long took the whole page to load

edit: does seem that pale moon doesn't have any doh feature - good to know..

If you highlight a specific something, you should see under timings how long dns took, etc. Or what in the process of loading that what took so long, etc. But the main page will give you how long the page took, how much was downloaded, etc.

Octopuss

@johnpoz I still don't know how to read this.
Lots of pages have something that DNS resolution took half a second or more, and the rest in the tens of miliseconds.
There is almost always lots of waiting too, but all of this is so very website dependant I can't draw any conclusion from it.

I guess I'd need a few suggestions for sites that are known not to be technical trash and are not hosted on some slow ass servers.

johnpoz

@octopuss give me an example site that your having issues with please.. And can see if loads slow or what..

There is no magic settings that says make my internet connections faster sorry to say ;)

Are you not using an ad blocker? Maybe all the crap the page is waiting for is just ads?

What about sites like https://slashdot.org/ or what about a site like your bank? Or gmail or whatever other email site you use? What about some site like https://www.reddit.com/

Octopuss

@johnpoz

but then

Gertjan

@octopuss

These 5 examples show that DNS 'server' replies, or web server replies can take their time to come over to you. What your not seeing (and can't see) is the time the info took to reach that DNS or web server. When the requested info starts coming back; its loaded in a few msecs.

A friend of my sees the same thing, he is using a satellite connection (not Starlink).

Octopuss

@gertjan But what is the takeaway from that? Do I have a problem or are some sites simply behing too complicated networks or...?

Gertjan

@octopuss said in Settings for the most responsive browsing?:

Do I have a problem ...

Remove 'pfSense' ( and all the VM overhead) from the equitation for some tests.
Hook up your PC to your ISP connection directly - and re test.
And if possible : test with pfSense on real hardware - nearly any small ancient PC will dual NIC will do.

Octopuss

@gertjan I doubt virtualization plays any role, because the server is basically doing nothing most of the time, but yes, I'll try direct.
I don't have a spare PC though, so I can only try this.

johnpoz

@octopuss that raceface.com is a cname

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.raceface.com.              IN      A

;; ANSWER SECTION:
www.raceface.com.       86400   IN      CNAME   shops.myshopify.com.
shops.myshopify.com.    3600    IN      A       23.227.38.74

;; Query time: 146 msec
;; SERVER: 192.168.3.10#53(192.168.3.10)
;; WHEN: Mon Mar 13 04:52:50 Central Daylight Time 2023
;; MSG SIZE  rcvd: 91

Now do trace.. and since its a cname - you will have manually follow it.. Do you show where in the trace your having a problem?

But since your not resolving and forwarding - any time to get an answer for what you ask for is on who you forward to, or you connection to them.. If I query say quad9 for that I get..

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.raceface.com.              IN      A

;; ANSWER SECTION:
www.raceface.com.       43200   IN      CNAME   shops.myshopify.com.
shops.myshopify.com.    58      IN      A       23.227.38.74

;; Query time: 44 msec
;; SERVER: 9.9.9.9#53(9.9.9.9)
;; WHEN: Mon Mar 13 04:56:34 Central Daylight Time 2023
;; MSG SIZE  rcvd: 91

Pfsense can not answer your dns query any faster than it gets a reply.. Turn on logging of queries and replies in unbound..

This is in the custom options box of unbound.

server:
log-queries: yes
log-replies: yes

Octopuss

@johnpoz It's always the first time I open a website that's slow. I have no idea why. Also I restarted pfSense and raceface.com still loads instantly.
I guess this is way above what I am supposed to dig in.

Octopuss

Oh and btw what option am I supposed to use in "DNS Resolution Behavior"?

johnpoz

@octopuss said in Settings for the most responsive browsing?:

It's always the first time I open a website that's slow.

who exactly are you forwarding too? When you forward you are at the mercy of how fast they respond, there is nothing pfsense can do about that.

I would suggest you turn on logging so you can see how long it takes to get a response..

Once its been looked up then pfsense would cache it.. If it takes 2 seconds to get a response.. That is how long it takes, and pfsense can do nothing about that..

"DNS Resolution Behavior"?

Default is fine.. That is pretty meaningless to anything other than pfsense.. That has nothing to do with what happens when a client on your network asks pfsense for something.

Octopuss

@johnpoz I use my ISP's DNS server for logical reasons. They have a really good network and the servers are like 1km away, unlike whatever else I might be using, like Google DNS that are located in who knows what hole.

Octopuss

@octopuss Oh and I have no idea what unbound is and where to find it, sorry.