On Thu, 6 Nov 2014, Adam Thompson wrote:

Ok, recap again...
- this affects multiple protocols, not just NFS. I've now confirmed
  it affects SSH as well.
- this only occurs when the server is behind pfSense and the client
  is on the "outside" of the firewall.
- this problem does not occur in the other direction through pfSense
  (LAN->WAN).
- to repeat myself, NFS works fine at ~1gbps between the same client
  and server without pfSense in the middle.

Ergo, I conclude it's something pfSense-related. Haven't had a chance to turn off of scrub yet.

I know you said that the CPU runs at ca. 5% load, but personally I'd be unsure of a P-III-class machine at LAN speeds. What bus connection do the NICs use? PCI? EISA? A 32-bit PCI bus operating at 33 MHz has a theoretical maximum bandwidth of 133 Mb/s, and the 64-bit expansion did little to improve that in any practical way. Plus, pre-MSI PCI devices notoriously shared interrupts, slowing down device-to-devce transfers. (And just to be cranky, I'll ask if any of the NICs in shared PCI/ISA slots, which would squeeze performance even further.)

Have you tested that hardware in a routing capacity with non-pfSense software?

Does the pfSense box have good DNS service?

Is the cabling flaky?

Is the pfSense box routing between subnets or just bridging? If the former, what's there when pfSense is not "in the middle"? Another router? Just a switch?

--
Paul Heinlein
[email protected]
45°38' N, 122°6' W
_______________________________________________
List mailing list
[email protected]
https://lists.pfsense.org/mailman/listinfo/list

Reply via email to