Firewalla Blue - Speed Reduction

Comments

5 comments

  • Avatar
    Firewalla

    How are you connecting firewalla blue to your network? and what router do you have? 

    Here are more things to check https://help.firewalla.com/hc/en-us/articles/360000555074-Troubleshooting-When-Running-Firewalla-#h_1da67d9a-a7f9-42a5-810a-abfc9bc288b3

     

    0
    Comment actions Permalink
  • Avatar
    Michael Chu

    Jim, if you end up finding a solution for this, I'd love to know about it. I encountered something similar performance issues and even had Melvin remotely log into my Firewalla Blue and run a variety of tests. Never did resolve it and still haven't had time to try a fresh Firewalla Blue install to see the performance out of the box (it's especially hard these days since we are all work from home and depend on the Internet being up...)

    0
    Comment actions Permalink
  • Avatar
    Jim Grohol

    I have a Ubiquiti USG FW/Router. From my first statement, I've tried DHCP mode and simple mode. I've also tried configuring one of my device's to use it's default gateway as the firewalla's IP address. No matter which method I used, it gave the same results as long as that device was monitored in firewalla. I also shut off all services that I could in firewalla. Once I hit the checkbox to monitor the device the throughput cuts in half. I disable the monitoring and it goes right back to normal.

    Firewalla blue is rated >500mbps, but is that total bandwidth across all devices monitored? Is there a per-session/per-device throughput spec for it? From my experience, it just seems that when monitored the traffic has to go through the inspection engines which has processing overhead. However, when not monitored by firewalla I can pull down close to 500mbps. When monitored by firewall it's always around 250mbps. It doesn't stagger or fluxuate, it's always 250mbps. 

    FYI. I've used the same speedtest from all my devices connected to the same switchport on my network so there was likeness there for the tests.

    250mbps is largely enough for most services, however I do have some work instances where I need to pull down large files so getting my full throughput is very beneficial.

    Is there anything I can check on the firewalla box itself, or any testing I can do from the box itself?

    0
    Comment actions Permalink
  • Avatar
    Jim Grohol

    @Michael Chu I'm a network engineer by trade and so far I can't find anything other than the traffic being inspected as the cause of the lower bandwidth. I currently have firewalla out of the network as I was seeing other 'wonkiness' as well. 

    I wish there was more statistics on what's actually going on with the services and what they are blocking. I find it a bit difficult to see if something was just blocked, how it was blocked, or allowed, etc.

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    We do have lots of users on the USG, a couple of places to check

    1. Double-check your QoS settings on the USG.  Make sure it is not limiting the port where firewalla is connecting to.   When firewalla is active, all the traffic ingress/egress will need to loop through the Firewalla

    2. Check how you are connecting the Firewalla.  Firewalla operates better to be closer to the router. 

    3. Today firewalla only have block, there is no allow.  But, our engineers are working on a better and visible way to show the rules.  

    4. Try testing with wired connection if you can, this eliminates noise from the wifi side.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Powered by Zendesk