OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: Pocket_Sevens on December 31, 2020, 04:49:13 pm

Title: Could use advice on streaming causing internet to stop
Post by: Pocket_Sevens on December 31, 2020, 04:49:13 pm

Good morning all and Happy New Year!

So, I could use some advice on an issue I keep running into.  I currently running OpnSense 20.7.7_1 and, for most internet use (working from home, online games, etc.), I don't seem to be running into any issues.  However, I've run into a problem where if one device is streaming something (such as Netflix) and another device starts streaming YouTube, the internet seems to stop working.  I need to reset the OpnSense router to get everything working again.

FYI, I'm on Google fiber so I have 1Gb connection.  I'm also using Unbound DNS through TLS and using Steven Black List to do ad blocking.  I also have Suricata set up in IPS mode using some of the ET rules.

I'm wondering if something on that list is causing something to be blocked and it continually tries to reach the network.  Or, do I need to set up some traffic shaping to help mitigate this issue?

As I'm not a total expert on this (I don't even play one on TV), any advice would be greatly appreciated. 

Title: Re: Could use advice on streaming causing internet to stop
Post by: MBfromOK on January 02, 2021, 06:19:23 pm

Just another OPNSense user here...

• FWIW: There is a reported issue with Unbound DNS for some users here:
          https://forum.opnsense.org/index.php?topic=20516.0, a patch has been released:
  
     
  Quote from: franco on December 21, 2020, 08:50:50 pm

      Here's the latest Unbound revision 1 from FreeBSD ports to try:
     
      # pkg add -f https://pkg.opnsense.org/FreeBSD:12:amd64/20.7/misc/unbound-1.13.0_1.txz
     

  
  If you have upgraded and are using Unbound I would start here as it will have the least (potential) negative impact.
  
  
• When we started the quarantine for COVID and I had to start working from home I ran into an issue like this where there was so much traffic that DNS requests were being delayed (and in some cases timing out).  To resolve this I setup traffic shaping that ensures that important traffic (like VOIP and DNS requests) always have a VIP lane to communicate with.  Since turning this on I have had no further issues, there is a helpful HOW-To here: https://docs.opnsense.org/manual/how-tos/shaper.html

Good luck!