MultiWAN it's slower instead of faster



  • i added the wan2 interface on installation as OPT1 then rename it to WAN_Aux. i created a "Multiwan" group with both WAN to tied 1. then setup an ip monitor each and DNS then went to firewall Rules and set LAN gateway to Multiwan group. as this didn't work as i spected i've create 2 failover groups: tied 1 and tied 2 to for wan and wan_aux and then tied 2 and tied 1. i've setup again the LAN firewall rules and still didn't work.

    I've setup 5 production firewalls with pfsense 2.1.4 for different schools and never had a problem they have more tan a year working with none incident, so i tried to give it a chance to pfs 2.2.4 in my office but i've find some bugs like this one in Captive portal and the Multiwan issue.

    went to firewall rules, click on LAN select IPv4 *  then edit it and in advanced features i click the advanced button on gateway and select my multi wan group. but it's slower instead of faster.
    each wan has an 10mbps adsl but when i put it together it gives me 6mbps on my speedtest

    so if anybody can guide me to make my pfs 2.2.4 it would be great.

    My Configuration in on the imgs







  • each wan has an 10mbps adsl but when i put it together it gives me 6mbps on my speedtest

    The 10 MBit/s are of a theoretical nature! And if combine the both WAN line you will not be able to
    get something like 20 MBit/s!!!!!! You will be able to get 10 MBit/s + 10 MBit/s and then, now I mean
    you must be setting up a loadbalancing method in my eyes that is then delivering you bot, fail over
    and load balancing, without one line is even in spare mode and not use, like a real fail over line!

    so if anybody can guide me to make my pfs 2.2.4 it would be great.

    Now you have to decide what you want to use for a load balancing method.

    • policy based routing
    • session based routing
    • service based routing

    I consider and suggest to the policy based routing method in you case here.
    If one WAN is failing, the entire rest of traffic is going through the other WAN
    interface that is up. And if both are running up and fine the entire load will be
    balanced over two WAN lines.



  • The gateway groups are either failover or round-robin. It's not going to magically bond your DSL's together, so you will only be using one at a time. Some download managers will use both lines, but a speedtest won't.
    Any hardware from this century should be able to handle 10Mb, so i would test again with a machine directly connected to the LAN interface, and again connected directly to the DSL equipment.



  • @dotdash:

    The gateway groups are either failover or round-robin. It's not going to magically bond your DSL's together, so you will only be using one at a time. Some download managers will use both lines, but a speedtest won't.
    Any hardware from this century should be able to handle 10Mb, so i would test again with a machine directly connected to the LAN interface, and again connected directly to the DSL equipment.

    if i test each line separated. the speed is between 10.1 to 10.53 on each. so i don't get why when i put them together it becomes slower.



  • Can you post some screen shots of your configuration?  Things like the gateway groups and your firewall rules?  This will help troubleshoot because while you've given some good high-level information, seeing the details will help.



  • The 10 MBit/s are of a theoretical nature! And if combine the both WAN line you will not be able to
    get something like 20 MBit/s!!!!!! You will be able to get 10 MBit/s + 10 MBit/s and then, now I mean
    you must be setting up a loadbalancing method in my eyes that is then delivering you bot, fail over
    and load balancing, without one line is even in spare mode and not use, like a real fail over line!

    when i was on pfs 2.1.4 the speed was on 16mbps to 20.4mbps when i put them together, then i knew they were working fine.

    Now you have to decide what you want to use for a load balancing method.

    • policy based routing
    • session based routing
    • service based routing

    I consider and suggest to the policy based routing method in you case here.
    If one WAN is failing, the entire rest of traffic is going through the other WAN
    interface that is up. And if both are running up and fine the entire load will be
    balanced over two WAN lines.

    y believe the policy based routing is the best for my case… how can i setup that?



  • @tim.mcmanus:

    Can you post some screen shots of your configuration?  Things like the gateway groups and your firewall rules?  This will help troubleshoot because while you've given some good high-level information, seeing the details will help.

    i edited the post and add the screens…



  • if i test each line separated. the speed is between 10.1 to 10.53 on each.

    But then also the entire load was going through one interface! If so and now you are
    using two WAN lines, from the entire load goes only 50% through each WAN line.
    Please don´t forget this.

    so i don't get why when i put them together it becomes slower.

    They will not be going slower, but on the other side please don`t expect that
    10 + 10 = 20 this is not true!
    10 + 10 = 10 + 10 this is true!!!!

    Only over MLPPP (MPLS) you would be making 10 + 10 = 20 is coming true!
    But there fore two main points must be given at first, the router or firewall must support this
    and the ISP must also offering you this service otherwise it would be only 10 +10 = 10 + 10

    But not really a problem if you are using policy based routing you would be able to use both
    WAN interfaces for your set up and load balancing would be offering both, fail over and load
    balance without the pain of one inactive WAN line.

    y believe the policy based routing is the best for my case… how can i setup that?

    This would be also what I really was thinking about your case, because you will not know how many
    school kids are using the Internet service at the same time.



  • @ubit:

    when i was on pfs 2.1.4 the speed was on 16mbps to 20.4mbps when i put them together, then i knew they were working fine.

    No it wasn't. No single stream can exceed the speed of a single line.

    Which speedtest are you trying? speedtest.net has changed to use multiple streams, but one stream at a time. If you load balance those out, you'll get unpredictable results at best.



  • speedtest.net for me always stripes between lines simultaneously.  I regularly get 5+ Mbit on my pair of 3 Mbit DSL lines, both on the website, and the iOS app.  The dslreports.com speedtest does as well if you select multiple streams under custom.



  • @SuperSpy:

    speedtest.net for me always stripes between lines simultaneously.  I regularly get 5+ Mbit on my pair of 3 Mbit DSL lines, both on the website, and the iOS app.  The dslreports.com speedtest does as well if you select multiple streams under custom.

    ok. i tryed dslreports.com and the upload almost daouble other speedtest sites, but the download still the same 6mbps top. if i tryed each one apart it gives me this: WAN 10.1mbps/975kbps and the WAN_AUX01 10.08mbps/1mbps



  • Please post you gateway group configuration, and the lan rules showing the gateway selection.



  • @dotdash:

    Please post you gateway group configuration, and the lan rules showing the gateway selection.

    There you have…




  • @SuperSpy:

    speedtest.net for me always stripes between lines simultaneously.  I regularly get 5+ Mbit on my pair of 3 Mbit DSL lines, both on the website, and the iOS app.  The dslreports.com speedtest does as well if you select multiple streams under custom.

    It's very hit and miss in that regard from what I've seen. Sometimes nowhere near the capacity of either individual line, sometimes around the sum of the connection speeds divided by the number of connections.



  • I just did a test on speedtest.net and it gave me higher numbers than the total of my lines combined.
    I stand corrected in that it now uses multiple lines, but it doesn't seem to be very accurate.



  • @dotdash:

    I just did a test on speedtest.net and it gave me higher numbers than the total of my lines combined.
    I stand corrected in that it now uses multiple lines, but it doesn't seem to be very accurate.

    well, watch this!

    you can see 20.83 Download speed… but check the WANs




  • I'm not sure if that version had the graphing bug, which is what you are seeing. One graph would report a speed and the other graph would report 2x the speed. It should be a consistent 2x.

    That graphing bug was subsequently fixed.



  • @BlueKobold:

    each wan has an 10mbps adsl but when i put it together it gives me 6mbps on my speedtest

    The 10 MBit/s are of a theoretical nature! And if combine the both WAN line you will not be able to
    get something like 20 MBit/s!!!!!! You will be able to get 10 MBit/s + 10 MBit/s and then, now I mean
    you must be setting up a loadbalancing method in my eyes that is then delivering you bot, fail over
    and load balancing, without one line is even in spare mode and not use, like a real fail over line!

    so if anybody can guide me to make my pfs 2.2.4 it would be great.

    Now you have to decide what you want to use for a load balancing method.

    • policy based routing
    • session based routing
    • service based routing

    I consider and suggest to the policy based routing method in you case here.
    If one WAN is failing, the entire rest of traffic is going through the other WAN
    interface that is up. And if both are running up and fine the entire load will be
    balanced over two WAN lines.

    Ok… 88 day after made this post i found the solution, so i post it here. the was a problem with one of the lines. as soon as my ISP repaired it i got my 20mb back...




  • hi ubit,

    Hope you and ur pfsense fine… :)

    i m newbie to Pfsense word. my network topology consist of 1LAN and 2WAN, i am having same issue of slow speed and some times even no traffic pass through WAN2, please guide me about rules for both WAN1 and WAN2, also confirm are able to balance load, with existing configuration,(as of attached PIcs...)also can you please give me favour to ping me on my email if you can spare some time for me....akifnaeem21@yahoo.com..



  • @akifnaeem:

    hi ubit,

    Hope you and ur pfsense fine… :)

    i m newbie to Pfsense word. my network topology consist of 1LAN and 2WAN, i am having same issue of slow speed and some times even no traffic pass through WAN2, please guide me about rules for both WAN1 and WAN2, also confirm are able to balance load, with existing configuration,(as of attached PIcs...)also can you please give me favour to ping me on my email if you can spare some time for me....akifnaeem21@yahoo.com..

    hi, i would love to help you…
    can you tell me this:
    both wans are from the same ISP?
    if you test both wans separately whats each bandwidht??



  • hi ubit,

    sorry for late was busy in exams,

    yes my both WAN link are from same ISP, and link bandwidth is 4Mbps, that why i want to sum up both to get at least 8mbps,



  • @akifnaeem:

    hi ubit,

    sorry for late was busy in exams,

    yes my both WAN link are from same ISP, and link bandwidth is 4Mbps, that why i want to sum up both to get at least 8mbps,

    can you send me the configuration you made on pfsense to work with multiwan, pls.



  • Please check attached pictures of my experiments….












  • yes my both WAN link are from same ISP, and link bandwidth is 4Mbps, that why i want to sum up both to get at least 8mbps,

    Once more again, this is not able to realize! You are making a thinking false.
    4 MB/s + 4 MB/s = 4 MB/s + 4 MB/s and not 8 MB/s

    This can be only done with MLPPP (MPLS) and the ISP must offer this as a service also, because this
    is a both ends construct.



  • @akifnaeem:

    Please check attached pictures of my experiments….

    i see. do you change your gateway on the rules?
    can we do a TeamViewer sesion?



  • Please check attached pictures of my experiments….

    For load balancing and fail over rules you could watch here in this thread the example that
    will be shown there. That will do it for all also as I see it right.
    multi-wan [dual] and policy based routing with failover



  • @ubit,

    thanks a lot buddy… by your help im able to get double...8mBs...

    here you can see speedshot




  • @akifnaeem:

    @ubit,

    thanks a lot buddy… by your help im able to get double...8mBs...

    here you can see speedshot

    it's great it work you done here! and all I did was see the conditions and make observations but at the end it's you who really pull it to work, congratullations!


  • Rebel Alliance Global Moderator

    you do understand speedtest uses multiple streams…

    As stated already 4 + 4 = 4 + 4 not 8..

    If you balance the load across both wan then you could get a combined total of 8... But 1 machine downloading via 1 stream is not going to get 8, the max it could see is 4...



  • @johnpoz:

    you do understand speedtest uses multiple streams…

    As stated already 4 + 4 = 4 + 4 not 8..

    If you balance the load across both wan then you could get a combined total of 8... But 1 machine downloading via 1 stream is not going to get 8, the max it could see is 4...

    that it's correct johnpoz. each line is 4mb and combined are 8mb. each stream could give us 4mb max. the pfsense box combine the lines and if we used the pfsense box as our gateway we will have 8mb bandhwidth that allow multiple download sessions as torrents apps or websites as youtube. but not in apps as dropbox or websites as megavideos.



  • Some sites does not allow changinbg IP, you tube for example loads slower or will not load the video if your ip has diff coubtry(using VPN) and slower if different ip same country. some sites will not allow changing ip at all.



  • Have you asked your ISP if they support or would consider supporting MLPPP?

    With pfSense MLPPP works very well and is very easy to set up. Sometimes a little education to an ISP is all it takes.



  • I feel the need to chime in here because I had the exact same situation that persisted for the past year. I have 3 3mb DSL lines to my house (ATT Business), and prior to my hardware upgrade Speedtest would show upwards of 9-10mb on the downstream and 512kb up.  Since my hardware change I barely get above 3.5mb and usually 256k up.

    Maybe you guys are right and we are moronic and totally wrong but all we can say is what we experienced.  My routinggroup was set just like the OP's to all T1 and packet loss or latency as a trigger. With 8+ devices, a kid streaming youtube, myself Netflix on the Roku the onyl time I ever had buffering was while torrenting (which is a bad thing you should never do). Now? I get buffering if I cough loud enough. Traffic graph peggeds out at between 3 and 3.6mb/s.

    I have a separate thread about my issues that is being ignored because my original box appears to have gone tits up.  But the OP for this thread is not crazy because my old 2.2-release worked like that.