[APU2] Connection issues, random lags, drops

[qwertypro]

Dear OPNsense Community,

I would like to ask some help, because I have connection issues on my firewall.
The connection to the internet is lagging, dropping packets.
The connection tested with a router connected directly to the ISP's modem and there was OK.

Currently I have OPNsense 22.1.2_1 (fresh installation), apu2e2 with Intel i211AT NIC.

Code: [Select]

root@firewall:~ # ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: icmp_seq=0 ttl=58 time=368.237 ms
64 bytes from 1.1.1.1: icmp_seq=1 ttl=58 time=2.554 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=58 time=2.943 ms
..
64 bytes from 1.1.1.1: icmp_seq=8 ttl=58 time=2.831 ms
64 bytes from 1.1.1.1: icmp_seq=9 ttl=58 time=541.662 ms
64 bytes from 1.1.1.1: icmp_seq=10 ttl=58 time=203.295 ms
64 bytes from 1.1.1.1: icmp_seq=11 ttl=58 time=2.639 ms
64 bytes from 1.1.1.1: icmp_seq=12 ttl=58 time=2.977 ms
..
64 bytes from 1.1.1.1: icmp_seq=16 ttl=58 time=2.835 ms
64 bytes from 1.1.1.1: icmp_seq=17 ttl=58 time=2.091 ms
64 bytes from 1.1.1.1: icmp_seq=18 ttl=58 time=2.057 ms
64 bytes from 1.1.1.1: icmp_seq=19 ttl=58 time=374.500 ms
64 bytes from 1.1.1.1: icmp_seq=20 ttl=58 time=550.380 ms
64 bytes from 1.1.1.1: icmp_seq=21 ttl=58 time=1.951 ms
64 bytes from 1.1.1.1: icmp_seq=22 ttl=58 time=1.746 ms
..
64 bytes from 1.1.1.1: icmp_seq=672 ttl=58 time=229.224 ms
64 bytes from 1.1.1.1: icmp_seq=673 ttl=58 time=204.755 ms
^C
--- 1.1.1.1 ping statistics ---
674 packets transmitted, 662 packets received, 1.8% packet loss
round-trip min/avg/max/stddev = 1.309/103.505/1503.840/228.744 ms

Code: [Select]

root@firewall:~ # iperf3 -c paris.testdebit.info -p 9239 -w 1024k
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  6]   0.00-10.00  sec  47.5 MBytes  39.8 Mbits/sec   20             sender
[  6]   0.00-10.04  sec  46.8 MBytes  39.1 Mbits/sec                  receiver

Do you have any ideas to resolve this problem?

[dave]

Cloudflare DNS is an anycast network.

https://www.cloudflare.com/en-gb/learning/cdn/glossary/anycast-network/

Just a guess, but some of those reponses, for whatever reason, could be coming from the other side of the world.

[qwertypro]

I tried with a single domain too without CDN, and the same. Unstable connection and pinging time.
What kind of other diagnostics should I run?

[qwertypro]

Nothing so far