Apple Facetime quality more than bad

[ohne]

Hey!

Ever since I switched to opnsense I can't make Apple Facetime work like it should be. The quality is so bad that people turn of their local wifi and use their slower mobile connections to get at least a steady connection.

Correct me if I'm wrong but Facetime uses STUN to connect the peers 1:1 without the detour to the apple servers. So I tried capture packages between a Macbook and an iPhone to see if this is working and in my opinion it's not?!

Can someone give me some hints how to solve this problem? The tcpdump looks like this:

10.20.10.25 is the IP of the macbook (inside vlan10, connected to a tp-link eap 660)
178.117.134.62 is the IP of an iPhone 12 which is connected to mobile internet

Code: [Select]

ohne@MBA-OH ~ % tcpdump -i en0 -v -n host 178.117.134.62
tcpdump: listening on en0, link-type EN10MB (Ethernet), capture size 262144 bytes
21:28:24.728435 IP (tos 0x0, ttl 64, id 9369, offset 0, flags [none], proto UDP (17), length 100)
    10.20.10.25.16395 > 178.117.134.62.16394: UDP, length 72
21:28:24.949980 IP (tos 0x0, ttl 54, id 57326, offset 0, flags [none], proto UDP (17), length 100)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 72
21:28:24.949985 IP (tos 0x0, ttl 54, id 42989, offset 0, flags [none], proto UDP (17), length 80)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 52
21:28:24.950696 IP (tos 0x0, ttl 64, id 28038, offset 0, flags [none], proto UDP (17), length 104)
    10.20.10.25.16395 > 178.117.134.62.16394: UDP, length 76
21:28:24.951390 IP (tos 0x0, ttl 64, id 29369, offset 0, flags [none], proto UDP (17), length 112)
    10.20.10.25.16395 > 178.117.134.62.16394: UDP, length 84
21:28:25.009445 IP (tos 0x0, ttl 54, id 56258, offset 0, flags [none], proto UDP (17), length 112)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 84
21:28:25.111834 IP (tos 0x0, ttl 54, id 15825, offset 0, flags [none], proto UDP (17), length 247)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 219
21:28:25.201225 IP (tos 0x0, ttl 54, id 49286, offset 0, flags [none], proto UDP (17), length 225)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 197
21:28:25.265685 IP (tos 0x0, ttl 54, id 4153, offset 0, flags [none], proto UDP (17), length 282)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 254
21:28:25.274087 IP (tos 0x0, ttl 54, id 53481, offset 0, flags [none], proto UDP (17), length 487)
    178.117.134.62.16394 > 10.20.10.25.16395: UDP, length 459

Perhaps someone else got this problem. There shouldn't be a bandwith related problem since the connection is 300/50 and is operating normal.

Thank you!

Edit:

Also when the connection is established logs are getting flooded which you can see in the attached screenshot.

[franco]

Firewall: Settings: Advanced: Firewall Optimization: "conservative" option?


Cheers,
Franco

[ohne]

Firewall: Settings: Advanced: Firewall Optimization: "conservative" option?

Already activated :-/