Hey
So I by no means say it is OPNSense, I simply am curious if there is possibly anything I need to do for PS5 [Console in general] in terms of opening ports? I assume all access is initiated inside out therefore I would not need any access, but, anything NAT wise or specific to PS5 or Game console?
PC games, like world of warcraft, never lag spikes. Seems it is only PS5 [Call of duty] or Xbox 360 [sea of thieves]
PS5 says NAT Type 3 if that helps..
Yeah so like, when one does not know all we can do is google, I mean every time I ask anyone anything on a game "google is your best friend" so, this is what I found and modified the ports [from ps4 to ps5] and of course my IP etc... I still get NAT TYPE 3
https://www.reddit.com/r/OPNsenseFirewall/comments/ux5h43/the_definitive_guide_to_enabling_sony_playstation/
Maybe you have CGNAT?
Usually NAT type 3 can cause performance issues for Consoles for some specific games, this can be fixed by creating an Outbound NAT rule and have static-port enabled.
Show your NAT rules (picture) and tell us if your WAN is behind CGNAT.
Regards,
S.
Not sure exactly about GNAT?
But here are some pictures;
And I do not see the pictures option
1
2
3
yeah, not a photoshop guy..i thought i DID trim them down
Any idears?
If you have CGNAT you cannot get a better NAT level than 3 (from what I know)
Maybe your PS5 is connected to Wifi and the connection is bad? Wifi can introduce quite some lag.
My goal is to NOT have NAT 3 on my PS5. Certain games are fine, some are not... Call of Duty lags non stop with spikes, but Rivals is constant 80ms. I am assuming something in these specific games is requiring other services... I feel the NAT 3 is what is doing it.
Also no, it is indeed LAN I ran through the house, Cat8. Like I said, and my gf plays a LOT, only 2 games do this and I believe it is because they are more involved with port communication. Anyway, my goal is to make it not NAT type 3 but can not seeem to accomplish this.
Once again: If your ISP offers only CGNAT or if you placed your OpnSense behind an ISP router (thus causing double-NAT), you will get nothing better than that. You can check by looking at the WAN interface IP of your OpnSense. If the IP is 100.64.x.1 to 100.127.x.254, you have CG-NAT and if it is from any RFC1918 range, you have double NAT.
I will have to go home and look. My OPNSense is my first and only Router/Firewall. I have a DSL Modem in BRIDGE Mode and OPNSense is doing PPPoE. Also, I have static IP's. 1 IP is the default opnsense router WAN ip as well as my home lan/wifi. 207.x.x.182 is my opnsen wan and 192.168.5.0 is my LAN.
With a routeable IP like that, you are not limited, because that is neither CG-NAT nor double NAT. Either your outbound NAT is misconfigured or there is more to PS5 gaming than simple NAT (like UPnP).
Obviously, you even have multiple fixed IPs. What I see in your outbound NAT rules, is in wrong order, BTW: You first map any 192.168.5.0/24, then the PS5 rule with static ports. The latter rule will be ignored like that, you must reverse the order.
Oh Geeze it has been so long since I've done NAT I totally forgot the hierarchy of NAT Placement. Now that I think of it, being 5.0 is the HOME LAN I don't even bother doing port specific out so just did whole network but now that you mention it wouldn't crating a specific out rule be redundant anyway if the whole network is allowed out?
Well, it does not say NAT:OPEN but I got it to say NAT Type 2 so I guess that is a win.
Complete aside, long shot in the dark: Do you see any fragments in netstat ("Interfaces: Diagnostics: Netstat, Protocol ip" or CLI)? I just read somewhere (that I can't recall) that Playstations can be wacky fraggers (I cannot attest to the accuracy of the assertion).