Re: [pfSense] What am I doing wrong? <10mbit through SG-1000
On Tue, Feb 7, 2017 at 11:59 PM, Øyvind 'bolt' Hvidsten wrote: > I have an SG-1000 on which I experience very low throughput. You're not the only one. I received my SG-1000 in mid December and have been going back and forth with Netgate support since then, trying to troubleshoot the poor performance I've been experiencing. To be fair, the Netgate support team has been very responsive and engaged in the process, but as of the most recent snapshot, I'm still seeing very poor performance vs. the SG-2220 (temporarily borrowed from my employer) I'd been using. I have a 50/5 internet connection, and I can reliably see those speeds with the SG-2220. With the SG-1k, I'm lucky if I can hit 15Mbit down reliably, and this is with the bare-bones, factory default config. Additionally, the SG-1000 seems to remain in a very high-latency state for some time following speed tests. I'll have (for instance) ~8ms latency to my ISP's default gateway before a speed test, and then during the speed test and for some 10 minutes after the test, latency will spike into the hundreds of ms. At this point, I've thrown in the towel, and have requested that I return the SG-1k for credit towards the purchase of an SG-2220. Support requested that as a last troubleshooting step, that I grant them remote access to my SG-1k so they can perform some more thorough real-time troubleshooting and testing. I'll be setting this up with them this week, and if they're not able to resolve it, I'll be returning the SG-1000. I was very hopeful for this device, but at least at this stage of its maturity, there appear to still be significant issues to overcome. -Erik ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] What am I doing wrong? <10mbit through SG-1000
I recommend you run iperf tests between pfsense1 <-> pfsense2, then pfsense2 to laptop, then laptop to pfsense1 and see where the bottleneck is next. iperf can be installed as a package on pfsense. On Wed, Feb 8, 2017 at 1:23 AM, Øyvind 'bolt' Hvidsten wrote: > It's from the wan to an internal switch. The switch has VLAN's, but > there's only one untagged VLAN on this port. The WAN port thus gets a local > IP in the 192.168.4.0/24 network. I set the SG-1000's LAN to be in the > 172.16 range so as to not conflict with it. That range isn't used elsewhere > on my network. > > The main router also runs pfSense. It's an SG-2440. The traffic graphs > show about 5mbit going to that VLAN interface while running the speed test > currently. > > Also watching pfTop while running the test in the background shows a > similarly low speed and no other traffic to speak of. I'd think a loop > should show up somewhere on this? And my laptop should be experiencing the > same thing while on the same network? > > > On 08/02/17 07:41, WebDawg wrote: > >> that is from the wan to the modem? >> >> The only other thing I can see is that you have some type of routing >> loop...or network loop? Any VLANing going on? >> >> On Wed, Feb 8, 2017 at 12:40 AM, Øyvind 'bolt' Hvidsten >> wrote: >> >> It would seem to be negotiating for gigabit. My switch also thinks so. >>> Note that the cable to my laptop is not plugged in at the moment, but I'm >>> currently running the speed tests locally through the console. >>> >>> : ifconfig | grep -E "^[a-z0-9]|media:" >>> cpsw0: flags=8843 metric 0 mtu >>> 1500 >>> media: Ethernet autoselect (1000baseT ) >>> cpsw1: flags=8843 metric 0 mtu >>> 1500 >>> media: Ethernet autoselect (none) >>> lo0: flags=8049 metric 0 mtu 16384 >>> enc0: flags=0<> metric 0 mtu 1536 >>> pflog0: flags=100 metric 0 mtu 33184 >>> pfsync0: flags=0<> metric 0 mtu 1500 >>> >>> >>> >>> On 08/02/17 07:31, WebDawg wrote: >>> >>> Check the interface settings, is it negotiating, 10mbit? status, interfaces? On Tue, Feb 7, 2017 at 11:59 PM, Øyvind 'bolt' Hvidsten < b...@dhampir.no> wrote: I have an SG-1000 on which I experience very low throughput. > > When I plug my laptop to the cable that normally goes into the > SG-1000's > WAN port, I get a download speed of roughtly 100mbit (ISP limited) > when I > run "curl http://ipv4.download.thinkbroadband.com/1GB.zip >/dev/null" > > Plugging that same cable into the SG-1000 and connecting my laptop > directly to its LAN port instead, I get less than 10mbit. > > Running the curl command directly on the console of the SG-1000 gives > me > the same abysmal result. > > [2.4.0-BETA][root@my.network.local]/root: curl > http://ipv4.download.thinkbroadband.com/1GB.zip >/dev/null > % Total% Received % Xferd Average Speed TimeTime Time > Current > Dload Upload Total SpentLeft > Speed > 2 1024M2 29.5M0 0 598k 0 0:29:10 0:00:50 0:28:20 > 523k > > This is after I just flashed it with today's image (20170207) and ran > through the setup wizard in the browser. No other settings have been > altered. > > What can I do here? > > > Best regards, > Øyvind Hvidsten > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > > >> ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] SG-2440 fsck at reboot
Any hint on how to switch drivers? Couldn't find any documentation about this, but I might be missing something. On 09/02/17 08:59, Jim Thompson wrote: igb On Feb 9, 2017, at 12:18 AM, Øyvind 'bolt' Hvidsten wrote: Ah. I had forgotten about that. That's me playing around with a few scripts and tcpdump/tcprewrite/tcpreplay in attempt to simulate a very specific environment. It was started by cron. Are there any specific drivers I should be using on the SG-2440 if I want to do stuff like that? On 09/02/17 01:53, Jim Thompson wrote: Why are you attempting to run netmap over standard, unmodified device drivers? (Perhaps Suricata IPS?) On Wed, Feb 8, 2017 at 11:47 AM, Øyvind 'bolt' Hvidsten wrote: So, I rebooted an SG-2440 at a remote site, and it didn't come back up. I went over there, plugged in the console cable, pressed and got a # Stupidly, instead of poking around, I typed "exit", and it immediately booted, complaining about some fsck fixes it had to do. Then it gave me a ton of lines like these: - 281.465158 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.476184 [ 799] generic_netmap_dtor Restored native NA 0 281.483175 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.490567 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.497547 [ 799] generic_netmap_dtor Restored native NA 0 281.504807 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.512232 [ 274] generic_find_num_queues called, in txq 0 rxq 0 done. 281.519241 [ 799] generic_netmap_dtor Restored native NA 0 281.526864 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.534269 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.541352 [ 799] generic_netmap_dtor Restored native NA 0 281.548217 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.555776 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.562758 [ 799] generic_netmap_dtor Restored native NA 0 281.569795 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.577263 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.584263 [ 799] generic_netmap_dtor Restored native NA 0 281.595263 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.603180 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.610788 [ 799] generic_netmap_dtor Restored native NA 0 Starting NTP tim281.618288 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 e client...281.627131 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.635177 [ 799] generic_netmap_dtor Restored native NA 0 281.642505 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.650094 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.657131 [ 799] generic_netmap_dtor Restored native NA 0 281.664235 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.671654 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.678689 [ 799] generic_netmap_dtor Restored native NA 0 281.685705 [ 266] generic_find_num_desc called, in tx 1024 rx 1024 281.693152 [ 274] generic_find_num_queues called, in txq 0 rxq 0 281.702990 [ 799] generic_netmap_dtor Restored native NA 0 done. Starting DHCP service...done. Configuring firewall.0 addresses deleted. 0 addresses deleted. .done. Generating RRD graphs...done. Starting syslog...done. [boot process continues.] - Well, the box is up now, but what the hey? Is it normal for these to get stuck at fsck and require manual intervention? What do all the generic_ lines mean? ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold