WebGUI slow on 2.2.3



  • Hi

    We're running PFSENSE 2.2.3 with CARP failover between two firewalls and Multi-WAN, when we make updates to the primary firewall the webGUI can be very slow completing it's task.  These updates can be DNS forwarder updates, rule changes, NAT, etc.

    Example:

    Add a DNS override for a host and click save - spinning wheel on in the browser for 10-45 seconds before page is returned.  Sometimes we will see an XMLRPC warning about communicating with with the secondary firewall but I think this is a red herring as that only happens about 1 in 10 of the slow responses.

    Sometimes when we make changes the response is instant!  The firewalls are PFSENSE supplied 4860's and we're using a dedicated port for CARP.

    Anyone else had issues with this?

    Cheers



  • @wavetune:

    Sometimes when we make changes the response is instant!

    How many states do you have running at the time, as this can vary, perhaps that might be why you see variability in speed when saving changes?



  • Thanks for he reply.

    Not a lot, 1561 and we have PFSENSE firewalls with a lot more.  Yesterday we disabled DNS Resolver and enabled the good old DNS Forwarder instead, things seem to be a lot better at the moment.

    We'll carry on testing and report back.


  • Rebel Alliance Developer Netgate

    Slowness on save with those units would have to be one of two things:

    1. DNS, which you've found already
    or
    2. AutoConfigBackup pushing a backup to the servers on save and taking a few extra moments to do so

    DNS is the usual culprit, if you have ACB though it can vary a bit depending on how busy your link is, how busy the server is, any issues in between, etc.

    (If you register those boxes you should have access to ACB if you haven't done so already)