Hi Steve, Have you checked the MTU and tcp-mss? This smells MTU related.
Generally speaking most DSL’s should be either 1492 or 1500 bytes. So to check this do the following: ping -M do 8.8.8.8 -s 1464 #check if its 1492 bytes ping -M do 8.8.8.8 -s 1472 #check if its 1500 bytes Remember the size value is the payload size so this excludes the IP header (20 bytes) and ICMP header (8 bytes). Cheers, Fraser > On 6/06/2015, at 3:00 pm, steve <[email protected]> wrote: > > Hi folks, > > Am nearing wits end... been away on hols for a month and my network > performance has plummeted. > > The best way of describing the problem is that you need to refresh a web page > before you get any content. In addition, bulk loading across a VPN ( eg scp ) > fails regularly. > > Basic design of network: 'firewall' server runs fail2ban and links upstream > ADSL to local wireless and wired subnets. It also provides DNS ( caching > server ), DHCP, OpenVPN etc services. > > I initially thought it was a DNS problem, and have migrated from the local ( > Voda ) DNS servers to OpenDNS, having briefly tried Googles resolvers on the > way. No improvement. > > Any thoughts on what I can try to identify the real problem? My thought is > that the GCSB are involved somewhere along the line, but as a SysAdm I am > paid to be paranoid! > > Cheers, > > Steve > > -- > Steve Holdoway BSc(Hons) MIITP > http://www.greengecko.co.nz > Linkedin: http://www.linkedin.com/in/steveholdoway > Skype: sholdowa > > _______________________________________________ > Linux-users mailing list > [email protected] > http://lists.canterbury.ac.nz/mailman/listinfo/linux-users
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Linux-users mailing list [email protected] http://lists.canterbury.ac.nz/mailman/listinfo/linux-users
