Re: [pfSense] pfsense really slow

[Steve Yates]

I saw something similar once after an upgrade, installing packages, when 
pfSense's DNS wasn't running.  Linux doesn't really do a round-robin or 
last-known-good DNS search, it just keeps trying the failing ones.  I don't 
recall noticing it on the main screen though.

--

Steve Yates
ITS, Inc.

-Original Message-
From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Robison, Dave
Sent: Friday, September 2, 2016 5:40 PM
To: list@lists.pfsense.org
Subject: Re: [pfSense] pfsense really slow

Figured it out.

Had to enter a few hosts into the local DNS resolver, including a CNAME for one 
of our LDAP authentication servers. The delay was DNS waiting to time out/fail 
on the local DNS records before pointing off to our other, canonical, internal 
DNS servers.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] pfsense really slow

[Robison, Dave]

Figured it out.

Had to enter a few hosts into the local DNS resolver, including a CNAME for one 
of our LDAP authentication servers. The delay was DNS waiting to time out/fail 
on the local DNS records before pointing off to our other, canonical, internal 
DNS servers.

Thanks again for the responses.


-- 
Dave Robison
Senior Business Systems Analyst
FIS Banking Solutions
510/621-2089 (w)
530/518-5194 (c)
510/621-2020 (f)
da...@vicor.com
david.robi...@fisglobal.com

_
The information contained in this message is proprietary and/or confidential. 
If you are not the intended recipient, please: (i) delete the message and all 
copies; (ii) do not disclose, distribute or use the message in any manner; and 
(iii) notify the sender immediately. In addition, please be aware that any 
message addressed to our domain is subject to archiving and review by persons 
other than the intended recipient. Thank you.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] pfsense really slow

[Robison, Dave]

Thanks for the responses folks.

I'm using Western Digital 1TB black drives connected to an LSI MegaRaid card. I 
use this setup extensively with FreeBSD on systems ranging, at the moment, from 
8.1 to 11.0-RC2. I don't experience this type of slowdown on other systems.

Load is nil:

[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: uptime
12:33PM  up 8 days, 20:01, 2 users, load averages: 0.00, 0.00, 0.00
[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: swapinfo
Device  1K-blocks UsedAvail Capacity
/dev/label/swap0  335544280 33554428 0%
[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: 

Here's some hardware details:

[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: dmesg | grep mfi | head -n 4
mfi0:  mem 0xb8b0-0xb8b0,0xb890-0xb891 irq 
18 at device 14.0 on pci4
mfi0: Using MSI
mfi0: Megaraid SAS driver Ver 4.23 
mfi0: FW MaxCmds = 1008, limiting to 128
[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: mfiutil show drives
mfi0 Physical Drives:
26 (  932G) ONLINE  SATA E1:S0
27 (  932G) ONLINE  SATA E1:S1
[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: mfiutil show battery
mfi0: Battery State:
 Manufacture Date: 10/30/2009
Serial Number: 887
 Manufacturer: LS001A
Model: 3598501
Chemistry: LION
  Design Capacity: 1215 mAh
 Full Charge Capacity: 62950 mAh
 Current Capacity: 61009 mAh
Charge Cycles: 1231
   Current Charge: 97%
   Design Voltage: 3700 mV
  Current Voltage: 3988 mV
  Temperature: 24 C
 Autolearn period: 30 days
  Next learn time: Tue Sep  6 01:11:33 2016
 Learn delay interval: 0 hours
   Autolearn mode: enabled
   Status: LEARN_CYCLE_REQUESTED
[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: mfiutil cache mfid0
mfi0 volume mfid0 cache settings:
 I/O caching: disabled
   write caching: write-back
write cache with bad BBU: enabled
  read ahead: none
   drive write cache: enabled
[2.3.1-RELEASE][r...@pfsense.vicor.com]/root: 








On 09/02/2016 08:04, compdoc wrote:
>> though the web interface is incredibly slow.
> 
> I think I remember that if your CPU doesn't support a certain built-in
> feature, the gui can be slow. 
> 
> But then it could be something else. Is cpu use high?
> 
> 
> ___
> pfSense mailing list
> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.pfsense.org_mailman_listinfo_list=BQICAg=3BfiSO86x5iKjpl2b39jud9R1NrKYqPq2js90dwBswk=xejns4hCLY4pkxk_Fns5Pg=RTodpaPSj9S0aRTrROdiSa4KWFcl4wPVtScGnOpNV_Y=QuQxXctLjx0pn2HL8Cxzj0oiUpH8IWo07W6B8th6lJc=
>  
> Support the project with Gold! 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__pfsense.org_gold=BQICAg=3BfiSO86x5iKjpl2b39jud9R1NrKYqPq2js90dwBswk=xejns4hCLY4pkxk_Fns5Pg=RTodpaPSj9S0aRTrROdiSa4KWFcl4wPVtScGnOpNV_Y=UBm9plxTzJ8dOls5IphGoEQgpg5sUtgawZknfjZVGBg=
>  
> 


-- 
Dave Robison
Senior Business Systems Analyst
FIS Banking Solutions
510/621-2089 (w)
530/518-5194 (c)
510/621-2020 (f)
da...@vicor.com
david.robi...@fisglobal.com

_
The information contained in this message is proprietary and/or confidential. 
If you are not the intended recipient, please: (i) delete the message and all 
copies; (ii) do not disclose, distribute or use the message in any manner; and 
(iii) notify the sender immediately. In addition, please be aware that any 
message addressed to our domain is subject to archiving and review by persons 
other than the intended recipient. Thank you.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] pfsense really slow

[compdoc]

>though the web interface is incredibly slow.

I think I remember that if your CPU doesn't support a certain built-in
feature, the gui can be slow. 

But then it could be something else. Is cpu use high?


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] pfsense really slow

[WebDawg]

On Thu, Sep 1, 2016 at 6:26 PM, Robison, Dave
 wrote:
> Hiya,
>
> Recently set up a pfsense box and it works great, very happy with the 
> functionality, though the web interface is incredibly slow. Wondering if this 
> is normal or if there's something wrong with my setup.
>
> Going from the dashboard to Firewall > Rules takes 25-30 seconds.
>
> I know that nginx and pf aren't very cpu or memory intensive, and php isn't 
> perfect but it's fairly quick, so I'm not sure what makes this box so slow to 
> respond.
>
> Here's the first few lines of dmesg:
>
> FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016
> 
> root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense
>  amd64
> FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512
> CPU: Intel(R) Xeon(R) CPU5150  @ 2.66GHz (2660.05-MHz K8-class 
> CPU)
>   Origin="GenuineIntel"  Id=0x6f6  Family=0x6  Model=0xf  Stepping=6
>   
> Features=0xbfebfbff
>   
> Features2=0x4e3bd
>   AMD Features=0x20100800
>   AMD Features2=0x1
>   VT-x: (disabled in BIOS) HLT,PAUSE
>   TSC: P-state invariant, performance statistics
> real memory  = 10737418240 (10240 MB)
> avail memory = 10313097216 (9835 MB)
> Event timer "LAPIC" quality 400
> ACPI APIC Table: 
> FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
> FreeBSD/SMP: 1 package(s) x 2 core(s)
>  cpu0 (BSP): APIC ID:  0
>  cpu1 (AP): APIC ID:  1
>
> Any related thoughts are appreciated.
>
>
> --
> Dave Robison
> Senior Business Systems Analyst
> FIS Banking Solutions
> 510/621-2089 (w)
> 530/518-5194 (c)
> 510/621-2020 (f)
> da...@vicor.com
> david.robi...@fisglobal.com
>
> _
> The information contained in this message is proprietary and/or confidential. 
> If you are not the intended recipient, please: (i) delete the message and all 
> copies; (ii) do not disclose, distribute or use the message in any manner; 
> and (iii) notify the sender immediately. In addition, please be aware that 
> any message addressed to our domain is subject to archiving and review by 
> persons other than the intended recipient. Thank you.
> ___


No, it is not supposed to do that.
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Re: [pfSense] pfsense really slow

[Abhi]

What's the drive being used?
Suggest to move it to SSD, probably, samsung Evo pro 850

On 02-Sep-2016 18:36, "Robison, Dave"  wrote:

> Hiya,
>
> Recently set up a pfsense box and it works great, very happy with the
> functionality, though the web interface is incredibly slow. Wondering if
> this is normal or if there's something wrong with my setup.
>
> Going from the dashboard to Firewall > Rules takes 25-30 seconds.
>
> I know that nginx and pf aren't very cpu or memory intensive, and php
> isn't perfect but it's fairly quick, so I'm not sure what makes this box so
> slow to respond.
>
> Here's the first few lines of dmesg:
>
> FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT
> 2016
> root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/
> builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense amd64
> FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512
> CPU: Intel(R) Xeon(R) CPU5150  @ 2.66GHz (2660.05-MHz K8-class
> CPU)
>   Origin="GenuineIntel"  Id=0x6f6  Family=0x6  Model=0xf  Stepping=6
>   Features=0xbfebfbff APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,
> MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
>   Features2=0x4e3bd CX16,xTPR,PDCM,DCA>
>   AMD Features=0x20100800
>   AMD Features2=0x1
>   VT-x: (disabled in BIOS) HLT,PAUSE
>   TSC: P-state invariant, performance statistics
> real memory  = 10737418240 (10240 MB)
> avail memory = 10313097216 (9835 MB)
> Event timer "LAPIC" quality 400
> ACPI APIC Table: 
> FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
> FreeBSD/SMP: 1 package(s) x 2 core(s)
>  cpu0 (BSP): APIC ID:  0
>  cpu1 (AP): APIC ID:  1
>
> Any related thoughts are appreciated.
>
>
> --
> Dave Robison
> Senior Business Systems Analyst
> FIS Banking Solutions
> 510/621-2089 (w)
> 530/518-5194 (c)
> 510/621-2020 (f)
> da...@vicor.com
> david.robi...@fisglobal.com
>
> _
> The information contained in this message is proprietary and/or
> confidential. If you are not the intended recipient, please: (i) delete the
> message and all copies; (ii) do not disclose, distribute or use the message
> in any manner; and (iii) notify the sender immediately. In addition, please
> be aware that any message addressed to our domain is subject to archiving
> and review by persons other than the intended recipient. Thank you.
> ___
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
>
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold