Speeds not as stable as pfSense

Started by smccloud, November 08, 2023, 11:48:56 PM

Previous topic - Next topic
I have successfully converted everything from pfSense to OPNsense (but the OpenVPN server I almost never used).  However, I have noticed that my connection speeds are not nearly as stable as they were under pfSense.  In pfSense I'd almost always get close to my provisioned 960 Mbps down and 35 Mbps up (actually 40 Mbps up due to the over-provisioning my ISP does).  But in OPNsense I will get anywhere from 300 Mbps to 950 Mbps down.  Upload is fairly stable.  I just need some ideas on where to look to help resolve this before I start transitioning other people to OPNsense from pfSense as well.

November 09, 2023, 01:07:54 AM #1 Last Edit: November 09, 2023, 01:37:45 AM by meyergru
Do you mean that download speed fluctuates quickly over time?

If so, you may experience bufferbloat, especially because your upstream and downstream speeds differ so much. Try this or this to check.

If this is indeed the problem, you can refer to this page and there is also a step-by-step guide for OpnSense.
Intel N100, 4* I226-V, 2* 82559, 16 GByte, 500 GByte NVME, ZTE F6005

1100 down / 800 up, Bufferbloat A+

Quote from: meyergru on November 09, 2023, 01:07:54 AM
Do you mean that download speed fluctuates quickly over time?

If so, you may experience bufferbloat, especially because your upstream and downstream speeds differ so much. Try this or this to check.

If this is indeed the problem, you can refer to this page and there is also a step-by-step guide for OpnSense.

Yes.  I have a local speed test app running tests hourly and it is wildly different every hour. I'll check bufferbloat later. Gotta love Internet in most of the US. Hopefully I get High-Split symmetrical cable Internet this winter (so soon).

Have you tried disabling hw.ibrs in system > settings > tunables?
This https://www.reddit.com/r/OPNsenseFirewall/comments/woaenn/slow_wireguard_performance/

I disabled it.

I also read to disable pmap.pti, however when i did i didn't get DHCP on my wan interface from comcast. So i re-enabled it until i could troubleshoot.