Only getting half speed

stephenw10

Check Status > Interfaces. Do you see the ports linked at the expected speeds? Are there any errors shown?

How are you testing the speed?

Steve

swemattias

@stephenw10 The interfaces are connected, how do I check connect speed in that UI?
No errors what so ever.

Using speedtest.net. And as I am in Sweden bredbandskollen. :)

johnpoz

@swemattias said in Only getting half speed:

And as I am in Sweden

And only 500/500 what are you out in the boonies.. Doesn't everyone have like 10G/10G in Sweden for like 4 euro a month ;) heheh

stephenw10

It should be shown as: Media 1000baseSX <full-duplex> or similar.

Or you run ifconfig -va at the command line to see that.

Do you have any packages installed?

johnpoz

Off the top, something like a IPS or Ntop could put a hit on performance.. Or even maybe some of the bandwidth monitoring tools like darkstat or something?

I would think a duplex mismatch would put you even lower.. If I had to guess you have sort of limiter or shaper setup, or something like ntop/ips stepping on your performance.

swemattias

@johnpoz 500/500 is 1,5 euro a month. 1000/1000 34 euro. Was easy choosing. But I am working on getting a new ISP, then Ill get 10G/10G for the same price as 500/500. :)

So just for fun I hooked It up behind the ISP router. The gui for pfSense feels snappier, I run speedtest on the inside, I get 500/500. When I run the speediest-cli on the command line I get 250/250. I will keep digging.

So hooked it up again directly, no ISP router. Now I get 500/500 from the inside, which I did not get before.
Still from the command line inside pfSense I get 250/250. It has to be something with the tool not the speed.
I use speedtests webclient on my comp and get 500/500. It has to be something with what measure server the speediest-cli uses.

Retrieving speedtest.net configuration...
Testing from Telenor Sverige AB (IP)...
Retrieving speedtest.net server list...
Selecting best server based on ping...
Hosted by A3 Allmänna IT - och Telekomaktiebolaget (Stockholm) [341.31 km]: 24.905 ms
Testing download speed................................................................................
Download: 239.04 Mbit/s
Testing upload speed......................................................................................................
Upload: 222.19 Mbit/s

Result inside:
https://ibb.co/TTWjR9p

johnpoz

@swemattias that is not a valid test to be honest.. Pfsense not meant to be a client/server sending data - its firewall/router - it routes traffic..

There have been countless threads about this ;)

Not saying such a test might not have some value - but its not a good test for throughput.. Test through pfsense, not from pfsense.

stephenw10

Yup especially on something relatively low powered like the 2100. The speedtest process itself uses significant CPU cycles.

Sergei_Shablovsky

@johnpoz said in Only getting half speed:

Off the top, something like a IPS or Ntop could put a hit on performance.. Or even maybe some of the bandwidth monitoring tools like darkstat or something?

Because of this each time that user need bandwidth monitoring ON EXACTLY GATE/FW, I suggest NetData.

Of course, next step up are “collector-agent” tools like Prometheus+Grafana, Telegraf… But this is in case You agree to have separate monitoring server.

P.S.
Would be great, if Netgate exclude OUTDATED tools like Darkstat, NtopNG, BandwidthD and include trafshow and NetData in CE version.
And as next step up give instructions how collect net flow data in new but reputable advanced systems like LibreNMS and Prometheus.

I would think a duplex mismatch would put you even lower.. If I had to guess you have sort of limiter or shaper setup, or something like ntop/ips stepping on your performance.

99,9% of ISP in Europe and US using traffic shaper profile on user. And NEVER inform You about this ;)

Sergei_Shablovsky

@johnpoz said in Only getting half speed:

@swemattias that is not a valid test to be honest.. Pfsense not meant to be a client/server sending data - its firewall/router - it routes traffic..

Because of this:

in official docs directly point that Speedtest/Fast/Librespeed/iperf3 test need to be done ON SETUP PHASE, not on the top of normal workloads;
in official docs put step-by-step instructions how to test with each of above instruments;
provide pre-installed tools(in pfSense’s terms “Services” or “Diagnostic tools”) to testing bandwidth of uplinks and site-site connection, VPN connection;

There have been countless threads about this ;)

Not saying such a test might not have some value - but its not a good test for throughput.. Test through pfsense, not from pfsense.

Only knows what is uplink bandwidth, possible to go forward to measure “through pfSense”.
That’s RIGHT logic !

Why fighting with a hundreds of thousands of users?
Much better to give them instruments and instructions and questions about this “why my speed is so slow” on this forum decrease on 30-40%.