Text only | Text with Images

OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: roninxt on September 02, 2020, 08:01:06 AM

Title: Very slow connection when choosing LAN interface
Post by: roninxt on September 02, 2020, 08:01:06 AM
When choosing the LAN interface, my connection becomes very slow to the point that I can't access the internet.

I have a Core i5 4300Y and 8 GB RAM. Aside from the default services after opnsense installation, I only have IDS enabled, with around 6-10 ET* rules enabled, IPS and Promiscuous mode enabled, and Hyperscan.

What could be the problem?
Title: Re: Very slow connection when choosing LAN interface
Post by: roninxt on September 02, 2020, 10:45:13 AM
Ok, I left IPS unchecked and everything went back to normal. All hardware offloading from the advanced settings have are disabled prior to enabling IPS. I don't understand, I have an Intel 1000 NIC which should support netmap. Also enabling IPS on WAN only works.
Title: Re: Very slow connection when choosing LAN interface
Post by: hushcoden on September 02, 2020, 05:37:41 PM
What if LAN only and promiscuous mode unchecked ?
Title: Re: Very slow connection when choosing LAN interface
Post by: roninxt on September 03, 2020, 02:26:31 AM
I found the problem.

My LAN is a lan bridge: LAN = igb1 (LAN default), igb2 (OPT1), igb3 (OPT2), it's not LAN = igb1. Enabling IPS should be on the actual interface. So it looks like it doesn't work well when you use it on a bridge.

I reconfigured the interfaces to be not on a bridge and IPS is now working.
Text only | Text with Images