Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't get Internet speed over 380Mbit with 1.2.3 release

    Scheduled Pinned Locked Moved Firewalling
    10 Posts 3 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      fableman
      last edited by

      Hi

      My problem is that I can't figure out how to make the firewall faster, I feel capped at 380mbit, and I turned off all stuff I can think of.

      I only have these service running:
      cron
      dnsmasq
      ntpd
      dhcpd
      miniupnpd

      I Disables the PF scrubbing to gain some extra speed but still can't get over 380.

      The speed test itself is downloading huge .jpg files over http.

      If I use my computer directly on Internet I go easy over 380Mbit.

      I allow all towards internet and just a few others firewall rules, nothing special just NAT and simple firewall rules.

      This is during the speed test, you can see the CPU's don't use much at all of the idle time.
      (ps auxe)

      root      11 100.0  0.0    0    8  ??  RL  Wed04PM 1672:36.77  [idle: cpu3]
      root      13 99.6  0.0    0    8  ??  RL  Wed04PM 1674:35.70  [idle: cpu1]
      root      12 95.0  0.0    0    8  ??  RL  Wed04PM 1662:59.50  [idle: cpu2]
      root      14 79.1  0.0    0    8  ??  RL  Wed04PM 1646:58.87  [idle: cpu0]

      Is there anything I missed to speed up pfsense?
      Something with the network cards ?

      I love to ge some inputs regarding this problem I have and how to find a solution.

      Most speed test sites got problems with 1/1Gbit FTTH

      1 Reply Last reply Reply Quote 0
      • Cry HavokC
        Cry Havok
        last edited by

        The hardware you're running (and version of pfSense) matters, but as you didn't tell us what you're using all I can do is point you at the sizing guidance.

        1 Reply Last reply Reply Quote 0
        • F
          fableman
          last edited by

          It's just me on that Internet line not hundreds of other people. (A personal fibre connection to my house)

          Iam using:  Intel atom dual core cpu 1.x Ghz. (shows as 4 cores)

          Guide tells me: 501+ Mbps - server class hardware with PCI-X or PCI-e network adapters. No less than 3.0 GHz CPU.
          Why dose not my CPU show any high load during speed tests then ?

          And I think a 3Ghz CPU for simple NAT sound very strange… with snort and other stuff loaded I can understand but not just with simple NAT going on.

          Another reflextion is how can my laptop 3 years old at 2Ghz and running windows Vista fronting Internet with its builtin firewall perform better then pfsens running under linux?

          I think that A dual core atom 1.4Ghz should beable to perform alot more then just around 400mbit NAT firewalling with only me using it ?

          Something is missing in this picture.. Please help me understand the problem here.

          Most speed test sites got problems with 1/1Gbit FTTH

          1 Reply Last reply Reply Quote 0
          • Cry HavokC
            Cry Havok
            last edited by

            What about the network cards? What about the interrupt rate etc?

            1 Reply Last reply Reply Quote 0
            • F
              fableman
              last edited by

              Hi

              Can you give me some linux command to run to get the output information you need to help me. (Iam no linux guru when it about drivers and hardware)

              Thanks alot for trying to sovle this problem.

              Using Realtek RTL8111C-GR Gigabit LAN

              Most speed test sites got problems with 1/1Gbit FTTH

              1 Reply Last reply Reply Quote 0
              • Cry HavokC
                Cry Havok
                last edited by

                You don't have to be Linux guru - pfSense uses FreeBSD ;)

                The top command (from the command line) will give you lots of useful information.

                1 Reply Last reply Reply Quote 0
                • F
                  fableman
                  last edited by

                  Top I know.. and this is my output when I do speed tests:

                  I can't see any problem here, why pfsense is soo slow.

                  $ top
                  last pid: 21428;  load averages:  0.02,  0.04,  0.00  up 0+01:59:36    20:18:18
                  34 processes:  1 running, 33 sleeping

                  Mem: 34M Active, 12M Inact, 48M Wired, 36K Cache, 32M Buf, 1896M Free
                  Swap: 4096M Total, 4096M Free

                  PID USERNAME  THR PRI NICE  SIZE    RES STATE  C  TIME  WCPU COMMAND
                  18325 root        1  -8    0 41736K 16992K piperd 1  0:08  0.29% php
                    562 root        1  4    0  7216K  4692K kqread 2  0:03  0.20% lighttpd
                    625 nobody      1  44    0  3156K  1296K select 3  0:02  0.00% dnsmasq
                    383 root        1  44    0  3268K  1132K select 2  0:01  0.00% syslogd
                  1356 root        1  8  20  3492K  1420K wait  1  0:01  0.00% sh
                    619 root        1  4    0 42760K 16084K accept 2  0:01  0.00% php
                    402 root        1 -58    0  5716K  2508K bpf    0  0:01  0.00% tcpdump
                  1086 root        1  8  20  3156K  780K nanslp 0  0:01  0.00% check_reload_status
                    403 root        1  -8    0  3156K  772K piperd 2  0:00  0.00% logger
                    957 root        1  44    0  3188K  1120K select 0  0:00  0.00% miniupnpd
                    462 root        1  44    0  3268K  1388K select 1  0:00  0.00% inetd
                    347 _dhcp      1  44    0  3156K  1296K select 2  0:00  0.00% dhclient
                    898 dhcpd      1  44    0  3156K  2056K select 1  0:00  0.00% dhcpd
                  1001 root        1  8    0  3240K  1264K nanslp 0  0:00  0.00% cron
                    563 root        1  8    0 39688K  5248K wait  2  0:00  0.00% php
                    611 root        1  8    0 39688K  5276K wait  3  0:00  0.00% php
                    585 root        1  8    0 39688K  5248K wait  2  0:00  0.00% php
                    626 root        1  8    0 39688K  5276K wait  0  0:00  0.00% php

                  Most speed test sites got problems with 1/1Gbit FTTH

                  1 Reply Last reply Reply Quote 0
                  • F
                    fableman
                    last edited by

                    when I enable Device polling it get capped at aound 180Mbit only.

                    When I Disables the PF scrubbing I get around 80Mbit extra speed.

                    Not much more I can do from the interface to test why pfsens is soo slow.

                    Most speed test sites got problems with 1/1Gbit FTTH

                    1 Reply Last reply Reply Quote 0
                    • F
                      fableman
                      last edited by

                      Maybee test the 2.0 beta and see if it's faster.

                      Most speed test sites got problems with 1/1Gbit FTTH

                      1 Reply Last reply Reply Quote 0
                      • C
                        cmb
                        last edited by

                        A relatively slow box with cheap NICs isn't going to do much more than that. Atoms with Intel gig cards can hit about 500 Mb. 2.0 may be a bit faster, but you're trying to accomplish more than your hardware can do. Normally I would expect the CPU to be maxed out, but you may be hitting bus speed limits or other limits of your hardware.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.