Lan network very slow

arnoldg

yes the wan speed is close to that the ISP give. they say about 4Mbit is the line speed.

so that looks fine. next step is to find out why captive portal is slowing things down.

stephenw10

Clearly it's not a hardware limitation that machine should be easily capable of 100X that speed.

So is this a fresh install that has always exhibited this problem or did you upgrade from a previously working version?

Clearly there is something amiss here. When you disabled captive portal how did you do it? Are/were you running any other traffic shaping?

Steve

arnoldg

it is on a running server, which started 1,5 year ago. until about 3 weeks ago this problem started.

it could be after updating the server from a previous software version.
But that i can't recall, i have setup the system to install updates automatic

as far as i can tell, there is no speed limit setuped in captive portal.

stephenw10

It cannot update without some manual interaction. 2.1.3 was released at the beginning of May so that seems likely. Some other users have possibly had issues with old traffic shaping rules. You have never used traffic shaping on this box?

Steve

arnoldg

Yes,

I had a bandwidth limitation for one user (ip aders) in the firewall rules.
That was a traffic shaping rule.

I already deleted these rules with no luck.

arnoldg

is there some tool to send you all the settings, so you could verify the settings.

stephenw10

You could probably pm me the config.xml file or just attach it here, after you've removed all the passwords, private addresses etc.
I can't promise anything though. ;)

Steve

arnoldg

send you a pm, because i don't know how to remove privacy information like passwords and ssh information.

stephenw10

Ok, so looking thorough your config file my best guess here is that the limit you are hitting is caused by the ezshaper section at the bottom. You have the total upload and download set to 8Mb and 4Mb but since that's from the point of view of the LAN intreface that would be an 8Mbps download speed for clients. Then you have the bandwidth limiter set to 15% which would be 1.2Mbps, close to what you're seeing. For some reason your traffic is being caught by this. I'm not sufficently familiar with the traffic shaper to say quite what has happened here.
A simple test would be to change the 15% to, say, 30% and see if you see double the throughput. I'm not sure where that fingure would be stored though, you'll have to hunt around for it. ;)

Steve

arnoldg

and where can i find the settings vor ezshaper.

I searched the config file and changed the up and download speed, even alterd the % now going to try if this give us a performance boost.

arnoldg

This is what i made off it.

for a while it looks good, but i'm trying to monitor it through the day

	 <step5><enable>on</enable>
			<bandwidth>80</bandwidth>
			<bandwidthunit>%</bandwidthunit>
			<aimster>on</aimster>
			<bittorrent>on</bittorrent>
			<buddyshare>on</buddyshare>
			<cutemx>on</cutemx>
			<dcplusplus>on</dcplusplus>
			<dcc>on</dcc>
			<directconnect>on</directconnect>
			<directfileexpress>on</directfileexpress>
			<edonkey2000>on</edonkey2000>
			<fasttrack>on</fasttrack>
			<gnutella>on</gnutella>
			<grouper>on</grouper>
			<hotcomm>on</hotcomm>
			<hotlineconnect>on</hotlineconnect>
			<imesh>on</imesh>
			<napster>on</napster>
			<opennap>on</opennap>
			<scour>on</scour>
			<shareaza>on</shareaza>
			<songspy>on</songspy>
			<winmx>on</winmx></step5> 
		 <step2><uploadscheduler>PRIQ</uploadscheduler>
			<connupload>100000</connupload>
			<connuploadspeed>Kb</connuploadspeed>
			<conndownload>100000</conndownload>
			<conndownloadspeed>Kb</conndownloadspeed>
			<conn0downloadscheduler>PRIQ</conn0downloadscheduler>
			<conn0interface>lan</conn0interface></step2>

stephenw10

Like I say, I'm not sure quite how those parts of the config file are generated. The traffic shaper is IMHO the most confusing part of pfSense. ;) I'll have to do some experimentation on my test box here.
You saved that config file and then forced a reload (or rebooted)? If the speed has increased then that certainly looks like the problem. The question now is why is catching your traffic when it looks like it should only be catching P2P traffic and what changed 3 weeks ago that caused it.

Steve

arnoldg

Lan speed is a bit faster but wan speed is almost the same, when monitoring with traffic speed i get around 800kb.

I think the problem occured after upgrading the software.

arnoldg

Here some pictures from speedtest.net

The fastes is with captive portal turned off
The slowest is with captive portal turned on

image.jpg_thumb

stephenw10

Ah, OK. So with captive portal turned off you are getting full speed?

I had a play around with the traffic shaper this afternoon and I'm not really sure why you traffic seems to be being caught in it. I expected to find you had the 'catchall' selected but you don't appear to have.
Looking at your config file and comparing it with mine, generated by the wizard, there are many differences that I'm failing to explain. I think the easiest thing at this point would be to remove the traffic shaper completely, remove the <ezshaper>section from the config file manually and reapply the wizard. After backing up the config of course. ;)

Unless anyone else has any ideas?

Steve</ezshaper>

arnoldg

i removed the ezshaper section, but this didn't solved the problem.
Is there a way to reinstall a early version of pfsense which worked ok for me.

Then i will reinstall that verion and hopfully that one will work again ok.

Or some body else should have the solution, or a fix for the problem.

arnoldg

Need some help on this one !!!

stephenw10

You mean is there a way to downgrade remotely? I don't think so, though I've never tried.

Steve

arnoldg

i'm curently on 2.1.3 so i thinking of going back to 2.1.1 that is the latest working version so far i can recal.
But will it working again.

there should be a solution for my problem.

stephenw10

I take it the site is a long way from you?

Reinstalling might be the only way to downgrade, I wouldn't go to 2.1.1 though that was the version vulnerable to Heartbleed. I guess it wouldn't be a problem if you upgraded immediately.

If you have removed all the traffic shaper rules from the webgui and the ezshaper section from the config file there shouldn't be any shaping happening. :-\ Is there anything left in the current config file?

Steve