Traffic "hangs" at random intervals
-
Hi
I've already postet a thread about my problem here http://forum.pfsense.org/index.php/topic,59161.0.html , but i'm going to try the general sub for a wider audience.
The thing is, my pfsense 2.0.2 amd64 installation has some problem where traffic will stop flowing for a couple of seconds, and then continue on as if nothing happened. There is no entry in the logs or anything like that.
I've physically switched my installation to a new server to rule out hardware failure, but the problem continues. It's a Dell R610 with 10Gbit intel interfaces.
I have about 15 different vlans, which are running through the 10gig interface up to a cisco switch which has vlan trunking enabled.
Any ideas on how to troubleshoot this?
-
Is pfSense running on "bare metal" or in a VM?
Do you have a record of times when forwarding stopped? Have you had a look at system logs, RRD graphs for link quality, CPU usage etc at those times?
I presume something "routinely" happens and you interpret that as "traffic stops flowing for a couple of seconds". What data has lead you to that conclusion - data from somewhere? web pages slow to refresh/advance? User complaints?
Traffic from where to where? Traffic to/from the Internet can stop flowing due to events over which you have no control: congestion, circuit breakage etc.
-
it's a bare metal install.
in the link i provided theres a more detailed explanation of how i found the problem.
the short version: flow stops on primary firewall for a couple of seconds. it happens about 0 to 2 times a day. it can be during the night when theres 1mbit thoughput on the firewall, or during backup routines when theres 3gbit of data running trough it.
i have seen the problem in realtime ONE time when i pinging a server in a different subnet/vlan. ping timeouts for 5 seconds, then everything was normal, no logs, no nothing.
-
I have no experience of CARP and have no knowledge of why CARP switches master role between systems. I think this really belongs in the CARP forum and you should wait another day or two for a response there or offer some cash to persuade someone to put aside their normal responsibilities in order to look into this. If it is urgent, perhaps you could purchase support.
-
locking this one since the problem is better defined in the linked CARP thread so this is just a duplicate.