Webgui access from WAN is too slow

sbyoon · Jul 25, 2008, 9:58 AM

Yes, my pc is in the same subnet as Wan.

eri-- · Jul 25, 2008, 12:00 PM

Well with a fix that went in 1.2.1 you will not be able to do that.
Place a router in-between and you can go full speed.

cmb · Jul 25, 2008, 8:31 PM

Ooh, fallout from the reply-to changes. we'll need to accommodate same-subnet traffic differently on each WAN.

ipv2 · Sep 7, 2008, 5:08 PM

Same problem here with the snapshot of 31-08-2008 via the LAN all is working fine. But via the WAN it's very slow (almost not working) no traffic shaper issue the traffic shaper is off. Also working with Intel Gigabit Ethernet (onboard on a super micro server). When I connect via a ssh tunnel from a directly attached machine through the WAN it's working just as good as the LAN. Have done some test to make shore that this is not a resolving issue. Know that almost for shore now. Looks like this problem has something to do with MTU of MSS (know my mtu is 1500 from client to the WAN even with the don't fragment bit) somebody knows a solution for this?

Thanks in Advance.

steveh · Sep 26, 2008, 12:32 AM

yep confirmed its tso thats causing the issue on 1.2.1-RC1 built on Thu Sep 25 11:47:42 EDT 2008
Whats really odd is even though there are pass rules for the packets some are still hitting the default deny when tso is enabled so theres something really quite low level breaking badly.

eri-- · Sep 26, 2008, 9:58 AM

The issue reported was not a tso problem but it i fixed it and should not be a problem anymore.

The tso/rxsum/txsum or later offloadings that will come in later 10Gbps drivers even work or don't so there is no middle way with them.
I guess FreeBSD-release 7.1 has some more corrections on this side but for now recommended is that:
if you face problems disable it.

ipv2 · Sep 26, 2008, 1:17 PM

When is issue is fixed? I've tested last week with the daily snapshot but still have the same problems.

Thanks

TheT · Sep 28, 2008, 8:11 AM

Hello,

I have the same problem with slowness in accessing webgui @ WAN. I created proxy connection into a server on the same switch as pfsense in order to be able to manage pfsense remotely.

Can we have this issue fixed soon? I applied snapshot on 092708 and still the same problem.

Regards,

TheT

eri-- · Sep 28, 2008, 10:23 AM

Can you please describe the problems you have more throughly.

What type of WAN connection do you have, etc…?

TheT · Sep 29, 2008, 8:27 AM

Here is my setup:

All ports are Intel Nic: 1gig

ISP <-> Switch / Foundry <-> WAN PFsense (Dell server with 2 intel nics) (LAN) <-> Switch <-> Servers1…N
|
ServerA

From ServerA I can access Pfsense webgui w/o any problem. The connection at ISP is 1Gig

From a computer at home using comcast and/or att - (DSL) - Connection to web gui at pfsense is very slow and not usable.

Regards,

TheT

eri-- · Sep 29, 2008, 9:01 AM

This seems like a tcp mss problem probably it is at your end unless you have some kind of pppoe/pptp connection on the pfSense at work.
Another test would be to move the gui of pfSense to another port and try.

ipv2 · Sep 29, 2008, 9:27 AM

Hi, My config is the same as the one of THeT, ISP -> pfsense wan, switch, server. from our office to the wan it's just to slow (more than a minute just to load one page) when I connect to the LAN (via a ssh tunnel from a server on the LAN it's fast as normal.
I've already tried another port for the WAN (from the onboard Intel to a port on the quad GE Intel card. problem just moves to the new port.

I was also thinking of some mss issue (see my earlier posts) but not able to figure out what the problem is exactly.

If you like to login to our system for some testing this is fine, it's not in production just in test (because of the slow WAN).

Juve · Oct 28, 2008, 1:14 PM

I did a ifconfig em0 -tso and everything is working as it should now.

TheT · Dec 9, 2008, 5:07 PM

Is the WAN interface slowness fixed in the lastest build?