[Solved] Performance problem

[Ski-lleR]

Hi,

I recently assembled a computer to serve as opnsense firewall. Here is the hardware used :
Motherboard> GIGABYTE GA-A320M-S2H
CPU> AMD Athlon 200 GE
RAM> Corsair Vengeance 2400 Mhz
SSD> Curcial BX500
NIC> Intel i350T2V2
Switch> NETGEAR GS108

Someone on another forum tell me (before i buy) that it's completly overpowered for my usage (1 Gb WAN).

So i setup everything, not a lot of rules, basically allowing any LAN->WAN outgoing, blocking any incoming. VPN client connected to a 10 Gb vps server, and all network traffic routed trhought the VPN.

Unbound use DNSSEC trought DNSCrypt, and all dns traffic is redirect to local opnsense port.

When i download with Firefox, i get max output of my line, so that's good. I can do anything beside, no slowdown of any sort

The problem is when i launch JDownloader. Similar to firefox, i get all of my bandwidth used, but i can no more access to any website with firefox...And i don't understand why. When firefox eat all my bandwith i can continue to browse the web.

I tried to sature the bandwidth with anything else (c++ code, python, wget, torrent), i can always browse the web. It seem it appear just with jdownloader.

I tested on a clean install of opnsense, without dnscrypt/vpn (thinking they overload the cpu), the problem is exactly the same. So why, is my hardware too low for handle this

If you need log, screenshot etc...just ask and i will post.

Thanks

[banym]

I don't think you are running into hardware limitations.
JDownloader works different than Firefox. It is more aggressive and opens more connections to use all available bandwidth. Maybe that is causing the situation that the connections are using all bandwidth and you can't open new connections or a new single connection is slow or even not working.

[Ski-lleR]

Thanks for the response.

I've found the problem, it's because i was using transparent proxy, since jdownloader just use http/https connection, as you said the agressive character of jdownloader just satured my opnsense instance, but without high memory / cpu usage...

But in the end the transparent proxy was not a good idea, because it's was filtering thing coming from APT for example, and that something i don't want. Since i only want  filtering http/https from firefox, settings proxy in firefox is more logical, i've not other user on my network so transparent is useless in this case.

[banym]

Good to know. Thanks for follow up. Maybe you are so kind to mark the Subject in your first Post to solved :-)