Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Slow fetch in pfSense shell + slow squid downloads

    Scheduled Pinned Locked Moved Cache/Proxy
    5 Posts 3 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      birarda
      last edited by

      I noticed this issue while adding a squid proxy to our pfSense box. It looks like the pfSense download speeds are far slower than what hosts behind the pfSense on the LAN are getting.

      If I fetch a file to /dev/null on the pfSense box, it goes at about 800 kBps. At the same level of WAN saturation the same file downloads at 2.5MB/s over wireless from my computer. When I enable the squid proxy all downloads seem to go the speed of the fetch on the pfSense box (which I guess makes sense since it's proxying the file through the pfSense box).

      What could this be?

      1 Reply Last reply Reply Quote 0
      • KOMK
        KOM
        last edited by

        What could this be?

        Slow disk?

        SSH in and run:

        squidclient -h <lan_ip> -p 3128 mgr:info</lan_ip>
        

        and check the Median Service Times for any outliers.

        1 Reply Last reply Reply Quote 0
        • H
          heper
          last edited by

          when using /dev/null , it shouldn't matter if the disk is slow or fast

          1 Reply Last reply Reply Quote 0
          • B
            birarda
            last edited by

            Some more discoveries from the past couple hours that may help me or others find the issue:

            It definitely has nothing to do with squid - everything weird I experience is also experienced by the pfSense locally with fetch.

            It has a very negative effect on a download where two machines have high RTT. For an S3 test with us-west bucket (we are in SF) it is able to get up to 9.5MB/s (even though from a machine on the network I can get 13MB/s). For a us-east bucket it sticks right around 800kBps.

            Is there something different the pfSense does to handle it's own traffic / squid's traffic? I should mention we have two gateways and I use two gateways groups (prefer one, failover to the other) splitting the DHCP space in half to assign some users to each.

            1 Reply Last reply Reply Quote 0
            • B
              birarda
              last edited by

              I was going to setup a squid proxy on another box on the network, but I'd really like to have squid on the same box as the pfSense. This is really the only issue standing in my way. Are there other things I can do to see why the pfSense box would have a slow speed locally?

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.