Slow Transparent Bridge?

[scyto]

Hi,

New here, new to opnsense, so please bear with me if I ask stupid questions.

I was seeing if I could use opnsense as a transparent bridge between my cable modem and  NAT/router. and have suricata running to do intrusion detection (not prevention).

I have it working based on these instructions https://docs.opnsense.org/manual/how-tos/transparent_bridge.html

I have not yet enabled the IPS service, and my gig connection has been slowed to ~250mbps.
The CPU has not gone above 40%, I have memory headroom.

My CPU is my rather old box is Intel(R) Celeron(R) CPU J1900 @ 1.99GHz (4 cores) and running OPNsense 20.1.4-amd64

Could you help me understand why it is this slow (is it expected) and if it isn't expected what i can do to troubleshoot or improve?

[scyto]

Ignore me, I just pulled the device back onto my LAN so it is between my PC and the rest of the network - getting 980mbps to an internal HTML speed test docker container on my NAS.

Seems comcast/xfinity let me down again :-(

[rtester]

There's a lot of problems I have with Comcast.
First of all: If you live in any sort of populated area, you may notice your internet speeds going down. At first, you may think it's Comcast throttling you.

It may be, but it gets even worse:
They have a wifi service enabled on every one of their routers called "xfinitywifi" https://www.xfinity.com/support/articles/xfinity-wifi-hotspots that they constantly keep turned on. They say it doesn't affect your internet speed, but that's entirely false. There is a way to disable it if you log into the Xfinity site, but it only works for about a week or two. I disabled it on a 250mb/s plan and got provisioned 30MB/s down late at night. That's half the problem.

The other half of the problem is Comcast might throttle you anyway. Using a Wireguard VPN over UDP seems to mitigate this somewhat, but all in all, Comcast isn't a great ISP. I would love if I had FTTH but sadly I don't.

[scyto]

I agree with what you said.

I had to get frontier FTTH installed last week due to the packet loss i was seeing comcast for the last month.  Though they would only sell me 100mbps.

Embarrassedly i have to admit the speed issue looks like it was my fault :-(

My testing PC 1gb mobo card suddenly started only doing 250mbs - i cant figure out why.  I switched to my 10g card with dac and got full 900mbps+

I have a crappy excuse, i had waay too many moving pieces yesterday (changed cable mode, setup untangle, realized it couldn't do transparent bridging, discovered opnsense, installed it for first time, locked my self out of an msata drive, etc).

When i get some time i will figure out the speed issue on the mobo nic.  it was working ok 48 hours ago.... i wonder if windows did an update....