--- Comment #6 from Maxim Masiutin <m...@ritlabs.com> ---
I agree with your conclusions, but I didn't make the tests that you have
suggested : (1. see good performance with LRO turned on and scp a large file to
the appliance and 2. see ICMP "need to frag" with LRO turned on and scp to a
machine on the remote side.)
Since when I use pfSense as a router, and when I ran speed tests on virtual
machines that used pfSense as a router, and download speed almost didn't
suffer, but upload speed dropped from around 400 MBps to around 0.5 MBps, I
suspect that your conclusions are correct.
So I agree with you that it was a misconfiguration, not a bug. But I didn't
make the tests that you have suggested.
I have contacted pfSense developers and asked them to change the notice in the
configuration panel in pfSense. Currently, there is a notice saying that LRO is
disabled by default because "most drivers have bugs". I have asked them to
change this to "LRO should only be enabled on an end point". I am sure that the
description of the LRO user interface was the cause of all problems that misled
I will watch future versions of pfSense and will remind them if they won't
change the notice.
Don't get me wrong, I'm just a simple user, not a professional sysadmin, and
I'm not skilled enough, for example, to see ICMP "need to frag" with LRO turned
on and scp to a machine on the remote side.
I would have suggested to close this bugtracker entry.
Thank you very much again for your help.
You are receiving this mail because:
You are the assignee for the bug.
email@example.com mailing list
To unsubscribe, send any mail to