Web server pages rendering slowly going out WAN but fine internally - HELP PLS!

jobsoft

Ahh yes. Checksum offloading errors.

From a shell:

ifconfig xl0 -rxsum
ifconfig xl1 -rxsum
ifconfig xl2 -rxsum

These seem like older cards, eh? I bet the checksum offloading is busted in FreeBSD.

forgot to add the results of the above commands you suggested:

ifconfig xl0 -rxsum

ifconfig: -rxsum: bad value

ifconfig xl1 -rxsum

ifconfig: -rxsum: bad value

ifconfig xl2 -rxsum

ifconfig: -rxsum: bad value

sullrich

Sorry, should be:

-rxcsum

jobsoft

Seems to have returned nothing on each:

ifconfig xl0 -rxcsum

ifconfig xl1 -rxcsum

ifconfig xl2 -rxcsum

Mark

sullrich

Then it worked. Do a ifconfig and compare the flags with what you posted originally.

jobsoft

WHOA!! ;D

That seems to have fixed it!!

I will have to go look up just what that option does.

Question is then, where can I work that into config.xml? I know there are options for media. I suppose I could look at the "master" config.xml that is over on the M0n0wall site as I suspect there are hidden options for something like this. I suppose I could tuck them into an rc file at bootup, but, I wonder if a "refresh" and/or change to an interface setting from within pfsense would reset the flags?!

But, at any length, this has advanced me considerably! I still intend to try and figure out why the WRT54G was mucking things up more that caused the checksum issue to rear up. But, at least it is functional and acceptable again.

I will post a follow to the WRT54G aspect at some point IFF something pertaining to pfsense is contributing.

Thanks all!!

Mark

sullrich

add a of shellcmd to config.inc from /cf/conf/config.xml

Download the configuration using the configuration backup and then add this under the <system>tag:

<shellcmd>ifconfig xl0 -rxcsum;ifconfig xl1 -rxcsum;ifconfig xl2 -rxcsum;</shellcmd>

Then re-upload the configuration back and note the firewall will reboot after restoring the changed configuration.. Afterwards the system will run the commands on reboot.

And FYI it appears that either your hardware's checksum offloading is busted or there is a driver issue. </system>

jobsoft

Thanks for this info. I am planning on getting 3 Intel chip cards ordered as I have read many others recommend them. Aside from Intel, any others good candidates?

sullrich

If you can swing it, get the intel gigabits. They have larger buffers and will decrease cpu overhead.

CryoGenID

Sorry for writing here into this discussion:
Are you sure the Intel NIC's won't make any problems?
We have a weird issue here and have also applied this "tweak" here and are
currently testing if our problems are resolved…
And we are using the Intel Dual Port GBit NIC's (and are also having the same
problem of lost/stuck packets with a brand new HP Bl20p G3-Blade)...

Has anybody running pfSense on a HP Blade successfully or on a DL380 with
two Intel Dual Port GBit NIC's?

Thanks for your reply :)

hoba

My homebox has 2x intel fxp onboard (ibm eserver). I don't see any issues with it. Not a zero in/out error. Same at the nexcom at our office or 2 other nexcoms that I have out with intel nics. However these drivers have support for several intel chipsets, so the problems might only arise with really new chipsets like in your hardware.