Pfsense 1.2 stable with IPSEC trough WAN 100Mbps reboots the box



  • Hey guys i was doing some performance tests today and found something pretty disturbing hehe i grabbed one of those Watchguard firefox x edge (low-end model) and put that on one end of an IPSEC tunnel, and a  pfsense box with an alix board on the other. The tunnel went up and was working but as soon as i tried to make a huge transfer of files he pfsense box just hangs and reboots itself, it happened all the times i tried.

    I understand that  amount of traffic could be too much but is just ridiculous that could  make the pfsense box die.  Surprisingly the watchguard mini appliance took it like a man. I was convinced that test would give exactly the opposite result … :(

    So... what do you think?

    A misconfiguration of my part?

    Watchguard specs
    Proc: Not sure probably 200-266Mhz
    Mem:128

    pfsense box specs
    Proc: Geode AMD 500Mhz
    Mem: 256

    IPSEC SPECS

    Phase 1
    md5-3des

    Phase 2
    md5-3des-pfs



  • I ran into a similar issue when testing with the old WRAP boards. When I setup an IPSEC VPN between a box with a crypto card, and one without a crypto card, it would crash the one without a crypto card. I bet that Watchguard has some sort of encryption offloading. Drop a Soekris crypto card in the pfSense box and it should be way faster than the Watchguard.

    http://forum.pfsense.org/index.php/topic,1869.0.html



  • I've beaten the hell out of a WRAP with a Xeon server as the other end point and it was never unstable. That sounds like an ALIX, which I haven't put through the same rigor yet.

    It's kernel panicing, so you're hitting either some sort of FreeBSD bug or hardware problem. Can you follow this:
    http://devwiki.pfsense.org/ObtainingPanicInfoForDevelopers

    and get us the results from when it panics? Assuming you can reliably replicate it, or at least replicate it once. you can email it to me (cmb@pfsense.org), it'll be pretty long.


Log in to reply