Re: [pfSense] pfSense Setup - Slow GUI DNS?
Just an update to the list for the archives: The Internet connection finally came in, and even with DNS reachability, the GUI was still massively slow. After lots of troubleshooting, it turned out to be exhausted MBUF's on the system. The default values were not sufficient, and that's what was causing slowness of the GUI. I increased the MBUF's significantly (46GB of RAM in these boxes), and all was right. In all fairness, I didn't go back to testing GUI response without a DNS entry or no Internet connectivity, but solving that MBUF issue was worth it. Mark. signature.asc Description: This is a digitally signed message part. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Fri, Jun 22, 2012 at 2:02 PM, Mark Tinka mark.ti...@seacom.mu wrote: Hello all. New to pfSense, loving the concept straight-off-the-bat! I'm in the process of setting up the installation per our environment, and seem to be hitting this seemingly consistent issue - a slow web GUI due to lack of DNS queries being answered. The machine is still in setup mode, so it's not connected to the Internet. However, it seems that a quick web GUI loves DNS (confirmed via pfSense state table), which, obviously, isn't up yet. This seems to be a recurring theme when I Google this issue. SSH'ing into the box has the same effect, even though UseDNS no is configured for the daemon, i.e., it takes so long for the password prompt to present, and on the off- chance that it does, using the system is no good either as every commands seems like the box has hang. The fix is to reboot the box, but I'll only have a 3 - 5 minute window within which to do anything useful, and then it's back to being slow due to lack of DNS. Anybody know what's really going on here? System is pfSense-2.0.1-RELEASE for amd/64, running on HP Proliant DL380 G6 servers, with 2x quad-core 2.4GHz Intel Xeon processors, packed with 48GB of DRAM. So it's certainly not a resource issue. Appreciate any feedback. Thanks. Hi Mark, A shot in the wild, but how about if you added the connecting host to /etc/hosts (manually)? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Friday, June 22, 2012 01:20:21 PM Odhiambo Washington wrote: Hi Mark, Hello Wash, long time no see :-). A shot in the wild, but how about if you added the connecting host to /etc/hosts (manually)? First thing I tried, no dice :-(. Mark. signature.asc Description: This is a digitally signed message part. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Fri, Jun 22, 2012 at 7:02 AM, Mark Tinka mark.ti...@seacom.mu wrote: Hello all. New to pfSense, loving the concept straight-off-the-bat! I'm in the process of setting up the installation per our environment, and seem to be hitting this seemingly consistent issue - a slow web GUI due to lack of DNS queries being answered. Known issue that's fixed in the next release. For now - fix your DNS. :) Or it *may* be safe to gitsync to RELENG_2_0, not 100% sure offhand whether that requires binary changes you won't get and hence will break things, so don't do it on anything you're not ready to blow up. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Fri, Jun 22, 2012 at 2:31 PM, Mark Tinka mark.ti...@seacom.mu wrote: On Friday, June 22, 2012 01:20:21 PM Odhiambo Washington wrote: Hi Mark, Hello Wash, long time no see :-). Hi Mark, It was nice seeing you online again :-) You moved to MU?? A shot in the wild, but how about if you added the connecting host to /etc/hosts (manually)? First thing I tried, no dice :-(. If that did not help, then I am stuck too. I've always did my setups with Internet connectivity. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Friday, June 22, 2012 01:36:14 PM Chris Buechler wrote: Known issue that's fixed in the next release. Many thanks for the confirmation, Chris. Much appreciated. For now - fix your DNS. DNS isn't the issue - the link isn't in yet, so I'm just covering ground as it's expected. I'm guessing many shops would be in this kind of situation, but as the fix is in the next release, that's great! :) Or it *may* be safe to gitsync to RELENG_2_0, not 100% :sure offhand whether that requires binary changes you won't get and hence will break things, so don't do it on anything you're not ready to blow up. I'll keep excitement low for now, but many thanks for the suggestion :-). Cheers, Mark. signature.asc Description: This is a digitally signed message part. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Friday, June 22, 2012 05:22:33 PM Vick Khera wrote: I just set up two boxes two days ago to replace an under-powered cluster. I did not notice this at all. The only delay I had was on boot when trying to start openntpd after restoring the configs from the production boxes. The only ethernet connected was a cross-over cable to a laptop for the LAN. The web GUI was fast the whole time I played with it. I did not attempt to SSH. The first time I installed mine, it gave me no issues after the initial reboot. Ever since then, it's touch go. It can be fast for 30 minutes, and then slow the next. After a reboot, it will be fast for 5 minutes, and then slow the next. At any rate, as Chris has confirmed it's a known issue, we'll certainly be looking forward to the fix in a coming release. Mark. signature.asc Description: This is a digitally signed message part. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
Re: [pfSense] pfSense Setup - Slow GUI DNS?
On Fri, Jun 22, 2012 at 11:22 AM, Vick Khera vi...@khera.org wrote: On Fri, Jun 22, 2012 at 7:02 AM, Mark Tinka mark.ti...@seacom.mu wrote: The machine is still in setup mode, so it's not connected to the Internet. However, it seems that a quick web GUI loves DNS (confirmed via pfSense state table), which, obviously, isn't up yet. This seems to be a recurring theme when I Google this issue. I just set up two boxes two days ago to replace an under-powered cluster. I did not notice this at all. The only delay I had was on boot when trying to start openntpd after restoring the configs from the production boxes. The only ethernet connected was a cross-over cable to a laptop for the LAN. The web GUI was fast the whole time I played with it. Depends on what pages you hit. We found some of them kick off NTP in the background which sits there a while trying to find DNS and locks other things in the process. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list
