Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Intrusion Detection and Prevention
»
Very slow connection when choosing LAN interface
« previous
next »
Print
Pages: [
1
]
Author
Topic: Very slow connection when choosing LAN interface (Read 1928 times)
roninxt
Newbie
Posts: 25
Karma: 0
Very slow connection when choosing LAN interface
«
on:
September 02, 2020, 08:01:06 am »
When choosing the LAN interface, my connection becomes very slow to the point that I can't access the internet.
I have a Core i5 4300Y and 8 GB RAM. Aside from the default services after opnsense installation, I only have IDS enabled, with around 6-10 ET* rules enabled, IPS and Promiscuous mode enabled, and Hyperscan.
What could be the problem?
«
Last Edit: September 02, 2020, 08:04:46 am by roninxt
»
Logged
roninxt
Newbie
Posts: 25
Karma: 0
Re: Very slow connection when choosing LAN interface
«
Reply #1 on:
September 02, 2020, 10:45:13 am »
Ok, I left IPS unchecked and everything went back to normal. All hardware offloading from the advanced settings have are disabled prior to enabling IPS. I don't understand, I have an Intel 1000 NIC which should support netmap. Also enabling IPS on WAN only works.
«
Last Edit: September 02, 2020, 10:51:00 am by roninxt
»
Logged
hushcoden
Hero Member
Posts: 551
Karma: 23
Re: Very slow connection when choosing LAN interface
«
Reply #2 on:
September 02, 2020, 05:37:41 pm »
What if LAN only and promiscuous mode unchecked ?
Logged
roninxt
Newbie
Posts: 25
Karma: 0
Re: Very slow connection when choosing LAN interface
«
Reply #3 on:
September 03, 2020, 02:26:31 am »
I found the problem.
My LAN is a lan bridge: LAN = igb1 (LAN default), igb2 (OPT1), igb3 (OPT2), it's not LAN = igb1. Enabling IPS should be on the actual interface. So it looks like it doesn't work well when you use it on a bridge.
I reconfigured the interfaces to be not on a bridge and IPS is now working.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Intrusion Detection and Prevention
»
Very slow connection when choosing LAN interface