DNS 8000+ms, troubleshooting help

srytryagn

@johnpoz Will keep this thread to pfsense/networking information for others. Will share info DM.

srytryagn

@johnpoz opened dm/room with you, please check.

johnpoz

@srytryagn saw your chat - so what about these settings for your offloading?

srytryagn

@johnpoz Which ones need to be enabled in pfgui?
{Running intel quad port NIC, well capable for offload. }

johnpoz

@srytryagn I would still try disabling them.. Its not going to make it worse.. There have been known issues with offloading. Do what I have set in my picture.

You will need to reboot pfsense.. if I find some time tmrw will go through the setup, if not will try over the weekend.. But there is a lot of football on this weekend ;)

srytryagn

@johnpoz I have tried configuring hwoffloading as you mentioned, rebooted, and ... same thing, network dead when running apps.

johnpoz

@srytryagn I have a bunch of stuff going on with real work today.. But I looked at it does seem pretty easy to setup.. Prob do it tmrw before the games start ;)

srytryagn

@johnpoz Thought to mention that I am running a pppoe connection from my ISP.
Could this be a factor or some setting that is amiss?

srytryagn

@johnpoz Any idea if pppoe passthrough is the potential issue ? Still struggling to find a solution, any input from you or others would be much appreciated.

stephenw10

As opposed to having the ISP device doing PPPoE?

There is an MTU reduction due to the overhead unless you can set 'mini-jumbo' frames upstream.

There is a single core restriction running PPPoE on pfSense itself so you can hit a CPU limit without realising it if you don't check the per-core usage.

srytryagn

@stephenw10 I do not understand what you mean, I am running a ISP combos box pfsense connects through pppoe. Could you expand on your suggestion as it may be helpful -> How do I set 'mini-jumbo' frames upstream ?

Is there any solution to the pppor restriction on pfsense or workwround ?

stephenw10

If the ISP router is terminating the PPPoE session then none of that applies. It only applies if that is bridging the PPPoE traffic to pfSense.

If PPPoE is terminated on pfSense then:
https://docs.netgate.com/pfsense/en/latest/hardware/tune.html#pppoe-with-multi-queue-nics

PPPoE adds an 8 byte overhead so to carry the standard 1500B MTU the frames on the parent NIC must be 1508B. Those are referred to as mini-jumbo or baby-jumbo frames (RFC4638).