Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Breaking the 6MB Barrier

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 8 Posters 4.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mikeisfly
      last edited by

      You didn't mention how the two sites were connected? Are you using a site to site VPN? If you are what kind are you using, IPSec or OpenVPN? In my experience using IPSec resulted in similar performance issues. When I switched to OpenVPN I saw almost not penalty in terms of encryption and decryption and was able to upload at almost full provisioned speeds. Never did figure out what the issue was could have been a CPU thing. I'm running a AMD Athlon™ X2 Dual Core Processor BE-2350.

      1 Reply Last reply Reply Quote 0
      • D
        dmoadab
        last edited by

        When I say "Windows transfer" is when I have the 2 machines connected via openvpn. I literally open 2 explorer Windows and drag and drop.

        I am not using Sftp.

        I have tried this with both openvpn, and with allowing specific IPs connect to specific ports, all with the same results.

        Here's my config file (attached), with some stuff asterisked out.

        Thank you all again as this is driving me CRAZY!

        config.txt

        1 Reply Last reply Reply Quote 0
        • S
          Supermule Banned
          last edited by

          How long is the ping between the 2 sites and do you have packetloss on the connection?

          Use colasoft ping tool to monitor and post in here.

          While you are monitoring ping, then load your connection with traffic. See if packetloss increases. pls. post results.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Have you in some way proved the connection to be good? Somehow removed pfSense from the link and tested?
            Speedtest.net is not a good test because it uses multiple connections to maximise the throughput.
            Try simply downloading a laarge file from a known good source. I have no idea where you are so I can't recommend one but I use the Thinkbroadband test files at http://www.thinkbroadband.com/download.html here in the UK. If it's still limited at your client machine you can then try downloading it directly to the pfSense box:

            root@pfsense.fire.box]/root(2): fetch -o /dev/null http://download.thinkbroadband.com/50MB.zip
            /dev/null                                     100% of   50 MB 1961 kBps 00m00s
            

            I notice in your config file that you have some traffic shaping options:

             <ezshaper><step1><numberofconnections>1</numberofconnections></step1> 
            		 <step3><enable>on</enable>
            			<provider>Asterisk</provider>
            			<connuploadspeed>%</connuploadspeed>
            			<conndownloadspeed>%</conndownloadspeed>
            			<connupload>30</connupload>
            			<conndownload>30</conndownload>
            			<download>300</download>
            			<downloadspeed>Mb</downloadspeed>
            			<conn0upload>300</conn0upload>
            			<conn0uploadspeed>Mb</conn0uploadspeed></step3> 
            		 <step4><step2><downloadscheduler>HFSC</downloadscheduler>
            			<conn0uploadscheduler>HFSC</conn0uploadscheduler>
            			<conn0upload>1</conn0upload>
            			<conn0uploadspeed>Gb</conn0uploadspeed>
            			<conn0download>1</conn0download>
            			<conn0downloadspeed>Gb</conn0downloadspeed>
            			<conn0interface>wan</conn0interface></step2></step4></ezshaper> 
            

            Are you running asterisk? Did you set these up intentionally? I'm no expert in traffic shaping (which seem like a bit of a black art!) and I can't see how this would be limiting you but still….

            Steve

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.