Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.3 firewall tab -rules slow

    Scheduled Pinned Locked Moved 2.3-RC Snapshot Feedback and Issues - ARCHIVED
    48 Posts 8 Posters 13.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      maverick_slo
      last edited by

      I`m not lying :)

      rules3.JPG
      rules3.JPG_thumb

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Wouldn't do me any good, but Steve_B may want to see it!

        Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • M
          maverick_slo
          last edited by

          Steve? :)

          BTW, I removed aliases (1 alias with 8 IPs in it) and was the same…

          1 Reply Last reply Reply Quote 0
          • S
            Steve_B Netgate
            last edited by

            By placing a print(microtime()); at about line 256, and another after the final include("foot.inc", I can see exactly when the PHP stars/finishes loading the page. I see something like:

            0.39483700 1453836509
            0.40212300 1453836509

            So about 100 mS

            Running the Firebug profiler, I see nothing suspicious in the Javascript so far.

            I am using Firefox 44 on a 2015 MB Pro

            Als ik kan

            1 Reply Last reply Reply Quote 0
            • M
              maverick_slo
              last edited by

              And this is what I see on Firefox 44, Win10

              Page loads/renders 7-9 seconds…

              rules4.JPG
              rules4.JPG_thumb

              1 Reply Last reply Reply Quote 0
              • S
                Steve_B Netgate
                last edited by

                Can you expand DOM.event handler please?

                Als ik kan

                1 Reply Last reply Reply Quote 0
                • M
                  maverick_slo
                  last edited by

                  Sure.

                  Reallllly long picture :)

                  rules5.JPG
                  rules5.JPG_thumb

                  1 Reply Last reply Reply Quote 0
                  • S
                    Steve_B Netgate
                    last edited by

                    Perfect. Thanks.

                    So now we know it is spending all that time recalculating the style of something or other!

                    Would you experiment with the different CSS files please and see if that has any effect?

                    System->General setup->Theme

                    Being of a light and sunny disposition, I prefer pfense-Beta, but perhaps you use something else.

                    Als ik kan

                    1 Reply Last reply Reply Quote 0
                    • M
                      maverick_slo
                      last edited by

                      I already tried it and no luck.
                      Tried all 3 of them.
                      Interesting sidenote…
                      Chrome on android 6 displays it in 2 seconds.
                      I think my computers have something in common will investigate that too...

                      1 Reply Last reply Reply Quote 0
                      • M
                        maverick_slo
                        last edited by

                        Removed antivirus same thing.
                        I don`t get it anymore :)

                        1 Reply Last reply Reply Quote 0
                        • M
                          maverick_slo
                          last edited by

                          I literally clicked through ALL pages and only this one is superslow.
                          NAT for example is very fast and it has lots of entries.

                          1 Reply Last reply Reply Quote 0
                          • S
                            Steve_B Netgate
                            last edited by

                            Nor me. I have 25 rules and the page loads in 380 mS according to the Chrome profiler.

                            Tough without being able to reproduce it.

                            Als ik kan

                            1 Reply Last reply Reply Quote 0
                            • M
                              maverick_slo
                              last edited by

                              Maybe is this specific issue limited only to my firewall…
                              I did upgrade a lot from 2.X to every version until today...

                              1 Reply Last reply Reply Quote 0
                              • M
                                maverick_slo
                                last edited by

                                In latest tests on fresh win 10 only firefox is problematic, ie, chrome, opera all load page in less than 2 seconds only firefox takes 8 :S

                                1 Reply Last reply Reply Quote 0
                                • I
                                  iamzam
                                  last edited by

                                  FWIW I also have the slowness problem in Firefox (Currently 44.0) and not in Chrome/Safari. For me it takes about 16 seconds total for the main WAN rules to finish the first time.Ā  I have the Firefox Web Developer Performance Profiler (Shift F5) .json export that you can import into your Firefox and see for every line where it spent the time but it is 1.8 MB and .json files won't attach here.Ā  For instance one of the most plentiful entries is "Recalculate Style" and if you select it, over on the sidebar you see the files it was processing such as pfsense.js:187

                                  Here is a screenshot of that:

                                  Performance-Firewall-Rules-WAN.png
                                  Performance-Firewall-Rules-WAN.png_thumb

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    maverick_slo
                                    last edited by

                                    Yeah we have same problem :)

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Steve_B Netgate
                                      last edited by

                                      We have tried everything we can to reproduce this, but no luck so far. Were I able to reproduce it, I would probably troubleshoot like this:

                                      From the command line, or from Diagnostics->Command prompt, create an empty CSS file:

                                      touch /usr/local/www/bootstrap/css/empty.css

                                      Now from the System->General setup page, change the web configurator theme to "empty" and save.

                                      The screen will now look horrible, but it will still be functional. You wont have a menu any more, but you will have links you can click on, so click firewall_rules. Does the page load more quickly? Much more quickly?

                                      If it is improved, I would go back to the pfSense theme (have to click the general setup link), copy the pfSense theme:

                                      cp /usr/local/www/bootstrap/css/pfSense.cssĀ  /usr/local/www/bootstrap/css/pfSense-TEST.css

                                      now select that pfSense-TEST theme from the setup page. You can now start commenting out sections of the pfSense-TEST.css file to try and locate the culprit. Probably best to start commenting out from the bottom up :)

                                      I'm not asking anyone to do this or even suggesting that it is a good idea, but it is about all I can think of at this point.

                                      Als ik kan

                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        maverick_slo
                                        last edited by

                                        Ok I will do it if you already ask for it :)

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          maverick_slo
                                          last edited by

                                          BTW, if we nail it, you owe me a bear,Ā  lol :)

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            maverick_slo
                                            last edited by

                                            Funny…

                                            I just did it, page loads exactly the same amount of time.

                                            nocss.PNG
                                            nocss.PNG_thumb

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.