Re: [pfSense] What am I doing wrong? <10mbit through SG-1000

2017-02-09 Thread Erik Anderson
On Tue, Feb 7, 2017 at 11:59 PM, Øyvind 'bolt' Hvidsten  wrote:
> I have an SG-1000 on which I experience very low throughput.

You're not the only one.

I received my SG-1000 in mid December and have been going back and
forth with Netgate support since then, trying to troubleshoot the poor
performance I've been experiencing. To be fair, the Netgate support
team has been very responsive and engaged in the process, but as of
the most recent snapshot, I'm still seeing very poor performance vs.
the SG-2220 (temporarily borrowed from my employer) I'd been using.

I have a 50/5 internet connection, and I can reliably see those speeds
with the SG-2220. With the SG-1k, I'm lucky if I can hit 15Mbit down
reliably, and this is with the bare-bones, factory default config.
Additionally, the SG-1000 seems to remain in a very high-latency state
for some time following speed tests. I'll have (for instance) ~8ms
latency to my ISP's default gateway before a speed test, and then
during the speed test and for some 10 minutes after the test, latency
will spike into the hundreds of ms.

At this point, I've thrown in the towel, and have requested that I
return the SG-1k for credit towards the purchase of an SG-2220.
Support requested that as a last troubleshooting step, that I grant
them remote access to my SG-1k so they can perform some more thorough
real-time troubleshooting and testing. I'll be setting this up with
them this week, and if they're not able to resolve it, I'll be
returning the SG-1000.

I was very hopeful for this device, but at least at this stage of its
maturity, there appear to still be significant issues to overcome.

-Erik
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] What am I doing wrong? <10mbit through SG-1000

2017-02-09 Thread WebDawg
I recommend you run iperf tests between pfsense1 <-> pfsense2, then
pfsense2 to laptop, then laptop to pfsense1 and see where the bottleneck is
next.

iperf can be installed as a package on pfsense.

On Wed, Feb 8, 2017 at 1:23 AM, Øyvind 'bolt' Hvidsten 
wrote:

> It's from the wan to an internal switch. The switch has VLAN's, but
> there's only one untagged VLAN on this port. The WAN port thus gets a local
> IP in the 192.168.4.0/24 network. I set the SG-1000's LAN to be in the
> 172.16 range so as to not conflict with it. That range isn't used elsewhere
> on my network.
>
> The main router also runs pfSense. It's an SG-2440. The traffic graphs
> show about 5mbit going to that VLAN interface while running the speed test
> currently.
>
> Also watching pfTop while running the test in the background shows a
> similarly low speed and no other traffic to speak of. I'd think a loop
> should show up somewhere on this? And my laptop should be experiencing the
> same thing while on the same network?
>
>
> On 08/02/17 07:41, WebDawg wrote:
>
>> that is from the wan to the modem?
>>
>> The only other thing I can see is that you have some type of routing
>> loop...or network loop?  Any VLANing going on?
>>
>> On Wed, Feb 8, 2017 at 12:40 AM, Øyvind 'bolt' Hvidsten 
>> wrote:
>>
>> It would seem to be negotiating for gigabit. My switch also thinks so.
>>> Note that the cable to my laptop is not plugged in at the moment, but I'm
>>> currently running the speed tests locally through the console.
>>>
>>> : ifconfig | grep -E "^[a-z0-9]|media:"
>>> cpsw0: flags=8843 metric 0 mtu
>>> 1500
>>> media: Ethernet autoselect (1000baseT )
>>> cpsw1: flags=8843 metric 0 mtu
>>> 1500
>>> media: Ethernet autoselect (none)
>>> lo0: flags=8049 metric 0 mtu 16384
>>> enc0: flags=0<> metric 0 mtu 1536
>>> pflog0: flags=100 metric 0 mtu 33184
>>> pfsync0: flags=0<> metric 0 mtu 1500
>>>
>>>
>>>
>>> On 08/02/17 07:31, WebDawg wrote:
>>>
>>> Check the interface settings, is it negotiating, 10mbit?

 status, interfaces?

 On Tue, Feb 7, 2017 at 11:59 PM, Øyvind 'bolt' Hvidsten <
 b...@dhampir.no>
 wrote:

 I have an SG-1000 on which I experience very low throughput.

>
> When I plug my laptop to the cable that normally goes into the
> SG-1000's
> WAN port, I get a download speed of roughtly 100mbit (ISP limited)
> when I
> run "curl http://ipv4.download.thinkbroadband.com/1GB.zip >/dev/null"
>
> Plugging that same cable into the SG-1000 and connecting my laptop
> directly to its LAN port instead, I get less than 10mbit.
>
> Running the curl command directly on the console of the SG-1000 gives
> me
> the same abysmal result.
>
> [2.4.0-BETA][root@my.network.local]/root: curl
> http://ipv4.download.thinkbroadband.com/1GB.zip >/dev/null
>   % Total% Received % Xferd  Average Speed   TimeTime Time
> Current
>  Dload  Upload   Total   SpentLeft
> Speed
>   2 1024M2 29.5M0 0   598k  0  0:29:10  0:00:50 0:28:20
> 523k
>
> This is after I just flashed it with today's image (20170207) and ran
> through the setup wizard in the browser. No other settings have been
> altered.
>
> What can I do here?
>
>
> Best regards,
> Øyvind Hvidsten
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>
>


>> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] SG-2440 fsck at reboot

2017-02-09 Thread Øyvind 'bolt' Hvidsten

Any hint on how to switch drivers?
Couldn't find any documentation about this, but I might be missing 
something.


On 09/02/17 08:59, Jim Thompson wrote:

igb


On Feb 9, 2017, at 12:18 AM, Øyvind 'bolt' Hvidsten  wrote:

Ah. I had forgotten about that. That's me playing around with a few scripts and 
tcpdump/tcprewrite/tcpreplay in attempt to simulate a very specific environment.

It was started by cron. Are there any specific drivers I should be using on the 
SG-2440 if I want to do stuff like that?


On 09/02/17 01:53, Jim Thompson wrote:
Why are you attempting to run netmap over standard, unmodified device drivers?

(Perhaps Suricata IPS?)




On Wed, Feb 8, 2017 at 11:47 AM, Øyvind 'bolt' Hvidsten  wrote:
So, I rebooted an SG-2440 at a remote site, and it didn't come back up.

I went over there, plugged in the console cable, pressed  and got a #

Stupidly, instead of poking around, I typed "exit", and it immediately
booted, complaining about some fsck fixes it had to do.

Then it gave me a ton of lines like these:
-
281.465158 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.476184 [ 799] generic_netmap_dtor   Restored native NA 0
281.483175 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.490567 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.497547 [ 799] generic_netmap_dtor   Restored native NA 0
281.504807 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.512232 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
done.
281.519241 [ 799] generic_netmap_dtor   Restored native NA 0
281.526864 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.534269 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.541352 [ 799] generic_netmap_dtor   Restored native NA 0
281.548217 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.555776 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.562758 [ 799] generic_netmap_dtor   Restored native NA 0
281.569795 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.577263 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.584263 [ 799] generic_netmap_dtor   Restored native NA 0
281.595263 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.603180 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.610788 [ 799] generic_netmap_dtor   Restored native NA 0
Starting NTP tim281.618288 [ 266] generic_find_num_desc called, in tx
1024 rx 1024
e client...281.627131 [ 274] generic_find_num_queues   called, in txq 0 rxq
0
281.635177 [ 799] generic_netmap_dtor   Restored native NA 0
281.642505 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.650094 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.657131 [ 799] generic_netmap_dtor   Restored native NA 0
281.664235 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.671654 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.678689 [ 799] generic_netmap_dtor   Restored native NA 0
281.685705 [ 266] generic_find_num_desc called, in tx 1024 rx 1024
281.693152 [ 274] generic_find_num_queues   called, in txq 0 rxq 0
281.702990 [ 799] generic_netmap_dtor   Restored native NA 0
done.
Starting DHCP service...done.
Configuring firewall.0 addresses deleted.
0 addresses deleted.
.done.
Generating RRD graphs...done.
Starting syslog...done.
[boot process continues.]
-

Well, the box is up now, but what the hey?
Is it normal for these to get stuck at fsck and require manual intervention?
What do all the generic_ lines mean?
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold