Netgate SG-1000 microFirewall

Author Topic: Terrible Internet Speeds  (Read 538 times)

0 Members and 1 Guest are viewing this topic.

Offline tnbp

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Terrible Internet Speeds
« on: September 12, 2017, 11:06:08 pm »
Hi, We've got a connection of 100/40, Which I can nearly get to when using the speedtest.net website. However that just tests the line speed, our actual download speed varies between 0.5 -1 mbps. What are some settings to check and tests I can run to identify the issue and fix it? Thanks.

Offline belt9

  • Full Member
  • ***
  • Posts: 233
  • Karma: +24/-6
    • View Profile
Re: Terrible Internet Speeds
« Reply #1 on: September 12, 2017, 11:22:45 pm »
Speed test makes actual connections to your client. If you can get it on speed test you can get fairly close to that in normal use.

What are you downloading from that is slow? Ie, server, client, content, etc. That's probably where you issue lies
 

Offline tnbp

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Terrible Internet Speeds
« Reply #2 on: September 12, 2017, 11:56:31 pm »
Everything we download is that slow, I used ozspeedtest, which downloads something as a test also. Speeds are awful all the time. There is something preventing this.

Offline belt9

  • Full Member
  • ***
  • Posts: 233
  • Karma: +24/-6
    • View Profile
Re: Terrible Internet Speeds
« Reply #3 on: September 13, 2017, 12:23:38 am »
Well you're going to have to start getting a lot more specific at some point if you want any help on this.

Offline tnbp

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Terrible Internet Speeds
« Reply #4 on: September 13, 2017, 12:34:59 am »
No worries, Cat6 Cable straight from NTD 1 on the NBN box, to WAN port on PFSENSE box, The WAN interface is set up as DHCP, however we have a static ip address with our ISP,  We have OpenVPN, IPSEC, DNS Forwarder, DHCP Service, DPINGER, Squid, SquidGuard, SSHD. What other information are you needing.

Offline tnbp

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Terrible Internet Speeds
« Reply #5 on: September 13, 2017, 12:36:29 am »
Literally any browser download takes an hour to download 100MB, on a good day. If someone is downloading, the others struggle to be able to browse also.

Offline belt9

  • Full Member
  • ***
  • Posts: 233
  • Karma: +24/-6
    • View Profile
Re: Terrible Internet Speeds
« Reply #6 on: September 13, 2017, 01:13:55 am »
It is entirely possible that one client is hogging all the bandwidth. If you can't rule this out then the easiest way to solve this is to use traffic shaper limiters. Check out the traffic shaking subforum. There's a long post about fq_codel. It tells you how to set it up on the first page. It takes about 5 minutes or less.

This will ensure that no user can hog bandwidth but if the network is idle then you can still use all that free bandwidth. There's no tweaking really, you just turn it on and it will do the rest.

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 14265
  • Karma: +1329/-191
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Terrible Internet Speeds
« Reply #7 on: September 13, 2017, 04:45:30 am »
"Squid, SquidGuard"

Then your not actually downloading anything, the proxy is..
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.3.4_p1 (work)
1x 2.4.1-RELEASE on VM esxi 6.5 (home)

Offline tnbp

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Terrible Internet Speeds
« Reply #8 on: September 14, 2017, 07:28:42 pm »
Thanks for the input Belt, I have been tracking this, but I can't seem to identify any one device that is using it all.

Could the squid stuff be what is slowing the connection down so dramatically?

I am new to this stuff, the guy who built this box has now left, so sorry for my lack of knowledge

Thanks

Offline belt9

  • Full Member
  • ***
  • Posts: 233
  • Karma: +24/-6
    • View Profile
Re: Terrible Internet Speeds
« Reply #9 on: September 14, 2017, 09:52:37 pm »
Try just setting up dummynet and see if it solves the problem.
For your connection create two pipes, one namede up and the other down.
Set down for 80,000Kbps and up for 32,000Kbps.
Under each create one queue weighted 100, set the mask on down to destination and to source on up and select /24 for each.

Now go to diagnostics > command prompt and run the following command:
Code: [Select]
ipfw sched 1 config pipe 1 type fq_codel && ipfw sched 2 config pipe 2 type fq_codel
Now go to your firewall rules and for all of your pass rules go to advanced options and add the queues you just made, save and apply.
From left to right  select up then down.

This will solve your problem if one client is hogging bandwidth. Even if that's not your problem it will make your network more better.

Offline bumzag

  • Newbie
  • *
  • Posts: 5
  • Karma: +0/-0
    • View Profile
Re: Terrible Internet Speeds
« Reply #10 on: September 17, 2017, 07:55:45 am »
What are you downloading and from where? If it's, say an .iso from a legitimate website, you still won't see that 100mbps, but you'll get very decent speeds. But if you're downloading a movie via torrent then that speed depends on the seeders as much as yourself. You may have 40mbps upload, but others probably may have something much worse. The fastest speeds available to me is 60mbps down and 5mbps up. And I live in a fairly developed area. 

Offline tnbp

  • Newbie
  • *
  • Posts: 6
  • Karma: +0/-0
    • View Profile
Re: Terrible Internet Speeds
« Reply #11 on: September 17, 2017, 11:09:01 pm »
not even get a 1MB download.

Thanks Belt9 I will give that a try. Thank you.

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 14265
  • Karma: +1329/-191
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Terrible Internet Speeds
« Reply #12 on: September 18, 2017, 05:24:04 am »
"not even get a 1MB download. "

From where from what?  before you were saying it was

"our actual download speed varies between 0.5 -1 mbp"
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.3.4_p1 (work)
1x 2.4.1-RELEASE on VM esxi 6.5 (home)

Offline stephenw10

  • Administrator
  • Hero Member
  • *****
  • Posts: 11867
  • Karma: +458/-15
    • View Profile
Re: Terrible Internet Speeds
« Reply #13 on: September 18, 2017, 11:00:14 am »
You are testing to speedtest.net from a client behind pfSense and seeing ~100Mbps? Yet a file download on that same client is ~1Mbps?

Hard to see how anything on the firewall could cause that. Seems more like something upstream that's optimising speedtest.net.

With that significant a slowdown I would usually check Status > Interfaces for errors or collisions on any interface. That would affect Speedtest equally though.

Steve

Offline johnpoz

  • Hero Member
  • *****
  • Posts: 14265
  • Karma: +1329/-191
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Terrible Internet Speeds
« Reply #14 on: September 18, 2017, 11:03:45 am »
"the guy who built this box has now left, so sorry for my lack of knowledge "

So it was like this when the guy built it, or has something changed?
- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.3.4_p1 (work)
1x 2.4.1-RELEASE on VM esxi 6.5 (home)