OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: massa on April 26, 2020, 08:41:53 am

Title: Getting just around ~200Mbit of 1Gbit Bandwidth
Post by: massa on April 26, 2020, 08:41:53 am
Hi guys,

just upgraded my ISP connection to 1Gbit, finally :)
Unfortunately I just get between 200 and 300Mbit via speedtest.net. If I connect directly to my ISP's Fritzbox I get the full 940Mbit.
For testing I´m currently directly connected with my PC to the OPNsense box. HW should not be an issue, using this APU Board: https://www.apu-board.de/produkte/apu1d4.html
CPU is an AMD G-T40E and also during speedtests it seems to be bored using "top".
No Intrusion Detection is enabled. MTU is on default which should be good I think.

Any ideas? I did some research already but was not able to find anything helpful...
Title: Re: Getting just around ~200Mbit of 1Gbit Bandwidth
Post by: olest on April 26, 2020, 09:02:35 am
Looks like that is what your hardware can handle:
https://wiki.ipfire.org/hardware/pcengines/apu1c
Title: Re: Getting just around ~200Mbit of 1Gbit Bandwidth
Post by: massa on April 26, 2020, 09:19:29 am
Hmm.. You are right it seems it is indeed the HW.
The only weird thing is that the CPU doesn´t show a high load while doing a speedtest...
I might order a newer box then for testing.

Thanks for your support!
Title: Re: Getting just around ~200Mbit of 1Gbit Bandwidth
Post by: lambrusco on April 26, 2020, 12:17:33 pm
Do you have a PPPoE connection to the ISP?
In case unfortunately you cannot get too much from the APU as PPPoE connection cannot be multithreaded and split between CPU cores.

With an APU2 I was able to get around 450Mbps over PPPoE with these tunable settings (reboot the APU once you add those tunables)

net.isr.dispatch=deferred
net.isr.maxthreads=4
net.isr.numthreads=4
legal.intel_igb.license_ack
hw.igb.rx_process_limit=-1
hw.igb.tx_process_limit=-1
kern.random.harvest.mask=351


In any case you will not reach Gbps with an APU1 or APU2, what I did at the end was to use another router to do the PPPoE connection and then configure a DMZ there pointing to OPNsense. I got 1ms ping more because of the double NAT but I achieved Gbps.

If you're going this way just remove the "net.isr.dispatch=deferred" tuneable as this setting is just to optimise PPPoE but decrease the general forwarding performance.
Title: Re: Getting just around ~200Mbit of 1Gbit Bandwidth
Post by: massa on May 02, 2020, 10:37:08 pm
Not doing PPPoE fortunately :)

I just dropped the APU1 for now and search for new HW. As I have read in the roadmap the next OPNsense version should be based on FreeBSD12. This does also mean newer WiFi cards are supported using AC standard.
So I am now thinking of waiting for that and then buying HW which can act as a full router/FW/Access Point.

Thanks all for your replies!