22.7 seems to break streaming from Disney+

[laurenceculhane]

Since the 22.7 update, my Sony TV and Android phone will no longer stream content from Disney+, my linux PC's seen unaffected.
I can access the site/app but when I try to stream content there is a long delay followed by an error (42) saying the network connection is too slow. Speedtest on the TV reports 60 meg down and up. The phone is the same but has 300 meg down.

Everything else seems fine - all other streaming services are ok but any attempt to play video from disney+ - nothing - error 42.
Investigation is tough as I have no information from Disney.

This happened when a hardware failure forced me to replace my opnsense device

I thought I was already running 22.7 but subsequent investigation suggests the upgrade coincided with the new hardware.

In the end I've gone back to the 22.1 series and everything works fine.

The configuration for the firewall is the same - using a saved config from the summer each time.

Do you have any idea what I could look for to try to solve this problem?

Apologies if this is a dumb question - and for the lack of proper data,

Laurence

[wallaby501]

Few questions to help guide it along..

1) Are they on the same subnet as your linux PCs? Ie. do the same firewall rules apply to your linux PCs as your Android phone and TV?

2) Did you install with zfs? Maybe try using bectl to make a snapshot then upgrade again to 22.7 series and see if it works?

3) Have you done the log live view with maybe a few filters such as interface=$LAN (or whichever), IP=$sonyIP, etc.? Do you use netflow to gauge traffic to individual clients? That could help too.

[laurenceculhane]

Thanks - I'll try 3). Same subnet and no zfs. I;ve downgraded to 21 series - works fine - update to 22 and all is OK - just disney refuses to stream video.
I don't want to go back to pfsense but may have to as I'd rather have updates!!

[cookiemonster]

what services do you have running that limit traffic like suricata, blocklists on unbound, adguard, zenarmor, clam, etc.?

[themadwizard]

I wonder if this is related to the issue that I am having - when I upgraded to 22.7.5, DNS over HTTPS broke for all browsers using it and Netflix and XBox will no longer connect.  Maybe the update broke something in the proxy?

Update: There was an issue in Squid after 22.7.5.  They claim it has been fixed in 22.7.6.

[laurenceculhane]

what services do you have running that limit traffic like suricata, blocklists on unbound, adguard, zenarmor, clam, etc.?

I am running suricata - but the TV gets 60MB/s down with both versions of opnsense when tested with speed test on the android TV so speed really isn't an issue - it must be a protocol thing - the difficulty is having no information from the disney end. 22.1.9 with the same conig works - but 22.7.6 doesnt

[cookiemonster]

Yes, I didn't expect bandwith to be the problem nd I meant services that limit traffic by blocking protocols. I could have been clearer.
If you've verified it is not suricata what blocks it, I'm afraid I can only suggest a traffic capture.

[hooraysimpsons]

New to OPNsense. Moving away from PFSense since buying new hardware. I'm having the same issue it seems. I have since disabled intrusion detection (suricata), floating firewall rules based on blocklists. I don't think I have anything else that could block traffic. Disabled IPv6 and no change. Using unbound for DNS.

[axsdenied]

I'm on 22.7 as well with no issue with Disney+. I'm not using any packet inspection tools though.

[cookiemonster]

I don't subscribe to that service, so hard to comment further. Their FAQs and Help pages are devoid of any technical information I can see.
At this point I'd be looking for firewall live view and packet captures. Sorry I can't be helpful.