Gold Speed Reduction

Comments

25 comments

  • Avatar
    Firewalla

    Are you using firewalla in router mode or simple mode or DHCP mode?   Do you have a lot of country blocks (>20 or 30) on the Gold?

     

    0
    Comment actions Permalink
  • Avatar
    Drew

    It is in router mode. I do not have any countries blocked

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    How is the pi connected to all of this? on the same switch?   The before and after connections are the same?  (Trying to rule out anything related to switching...).   If you can also triple check the cables used.

    The Gold can easily do line rate on a gigabit connection, so if it slows down, likely to be physical 

    0
    Comment actions Permalink
  • Avatar
    Ram!

    Drew,

    You still have the same problem ?? Is it resolved ? Because you're not the only one got the same problem! I have the exact speed reductions, like literally! I opened a ticket about it, and the engineers at Firewalla they're on it.. 

    0
    Comment actions Permalink
  • Avatar
    Drew

    I am still having the issue. Best I get is about 680Mbps. I have played with ports, even built another RPi4 to run since they suggested it was that.

    It isn’t. The device isn’t achieving the speeds. I was hoping the next release will fix. I am running a split network because of not wanting to slow down main traffic.

    0
    Comment actions Permalink
  • Avatar
    Don Lee

    Me as well,,,,,,,Has there been any updates on this issue? Prior to installing Firewalla Gold on my network I was getting 940 Mbps up/down on my Fiber Gigabit connection. Similar to OP, now getting 450-550Mbps up/dn. I knew I would get a speed hit with monitoring enabled but that's quite a drop.

    This was one reason I dropped my Netgear equipment since it showed a similar speed drop with network monitoring enabled. Was hoping with a dedicated firewall and cpu it would be better. 

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    @don, your issue is a bit different than Ram's.  His is a pure engineering mystery of upload is faster than download ... 

    @don to get us started, do check the connections around your network.  Make sure you have good cables going into the Firewalla (WAN/LAN) side.  Also, please let us know how you are doing the speedtest.

    You can also contact us help@firewalla.com, usually what we do is ask for support access, we can run speedtest in the unit to verify the box connections first, and then will likely to test speed from your equipment just to firewalla. 

    0
    Comment actions Permalink
  • Avatar
    Brian Shimkus

    When I had a speed related problem during the Gold beta days, support had me run a speed test off of the Gold directly using a webpage.  I don't recall what the URL was.

     

    @Firewalla, is that a temporary script that was placed on the box for troubleshooting or is it persistent?

     

    bks

    0
    Comment actions Permalink
  • Avatar
    Ram!

    It’s http://Firewalla’s IP:8833/ss/

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Usually, when we look at speed issues, we do following

    • We will ask you to open this web http://[replace with your Gold IP]:8833/ss/. @Brian, this is what you are talking about. This will test out the speed from your device to firewalla.  This link works for the red + blue as well.  Somewhat like a LAN test.  If this test is slow, then we will ask you to look at the wiring, and sometimes, if you are directly connected, try to use a switch in between.  We will also look at your network topology.  (example if you have relays in between networks, or testing  via wifi instead of ethernet)
    • And the next is something we can do inside the box, we simply download https://www.speedtest.net/apps/cli and download the x86_64 onto the box and then run speedtest in cli mode.  We usually take a few tests, the reason is speedtest often change servers, and also depend on the ISP, some time speedtest is just slow. (if you are using cable or any other shared medium).  Often a simple test off hours (early morning, late night) will produce a more realistic results.  

    If both tests are good, we will start the process of puling our hair out ... and your case will go into a high priority bucket, which we may create special images for you.   

     

    0
    Comment actions Permalink
  • Avatar
    Ram!

    I’m sorry from what ever I caused!
    But seriously, I’m really thankful for the follow up on my case. The mystery shall be uncovered without pulling hair, I’m counting on you!

    0
    Comment actions Permalink
  • Avatar
    Brian Shimkus

    Thank @Ram and @Firewalla.  :-)

     

    bks

    0
    Comment actions Permalink
  • Avatar
    Aaron

    FWIW, I'm not having any speed issues in my environment w/ the gold in router mode, on a gigabit line.  I have noticed a lot of inconsistencies with speedtest-cli (and similar) in general, so have my rpi 4+  running hourly tests to a fairly dedicated iperf3 server. 

    You can use a public iperf3 server as well with something like 'iperf3 -c speedtest.iveloz.net.br -P 30'.  Yeah, that server is in Brazil, but I'm still able to pull 8-900+Mbps from it in the US.  Good luck!

    0
    Comment actions Permalink
  • Avatar
    Ram!

    Aaron,
    Is your connection over PPPoe?

    0
    Comment actions Permalink
  • Avatar
    Aaron

    Hi Ram,

    No - Our ISP (Comcast) doesn't use it (at least here).

    Is yours?

    0
    Comment actions Permalink
  • Avatar
    Ram!

    So, either you’re using bridge mode or double nat.. Yes, my isp is over PPPoe.

    0
    Comment actions Permalink
  • Avatar
    Aaron

    Gotcha - Internally facing, I'm running the Gold in router mode.  On the other side, I'd have to do some research to see how it handles things.  The one time I logged into the gateway was to put _it_ into bridged mode so it wouldn't mess with my network.

    0
    Comment actions Permalink
  • Avatar
    1980cyber

    My gold is getting gigabit in both directions.  The trick is to make sure you select different servers for tests.  Some servers are better than others, and some test sites are more stable than others.    OOkla speedtest is the best, but you will have to try a few servers near you.   DSL reports also decent, depending on the time of the day ...   My test machine is a MAC MINI connecting to one of the Gold's ports directly. 

    @Aaron, I also tried running iperf3 locally ... very fast! 

    0
    Comment actions Permalink
  • Avatar
    Michael Bierman

    @Firewalla, this is awesome. How is https://www.speedtest.net/apps/cli different than remote_speed_test ? 

    I am trying to figure out why I am seeing slower WAN connections than I expect sometimes.  I"m running GOLD in dual WAN configuration. Does that affect how speedtest.net reports connection speed? 

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    remote_speed_test is python, so likely it can not manipulate packets as fast as "speed_test" binary from speedtest.net 

    Also, speed test is not always perfect, it depends on so many things.  Like the previous user already mentioned, it depends on the target server, your ISP's load, your neighbor's load (if you are doing DOCSIS), and if someone is doing a huge download ... 

    When we test, we always test the system with iperf3 in a controlled fashion. 

    0
    Comment actions Permalink
  • Avatar
    Michael Bierman

    @Firewalla Thank you! Very helpful.

    One question I didn't catch is does dual WAN impact speedtest.net results? 

    0
    Comment actions Permalink
  • Avatar
    Ian

    I'm also seeing this issue on the Gold. Admittedly running the Alpha firmware (1.971) but can't get the local speed test (http://Firewalla’s IP:8833/ss/) above 580mbps download and 280mbps upload, even when wired directly into the unit.

    0
    Comment actions Permalink
  • Avatar
    Andy brown

    Now I only have 500 up and down But my testing from (http://Firewalla’s IP:8833/ss/) I get 500 up 200 down.  From the cli Speedtest on the router direct via ssh 500 down 4 up!!  from my mesh AP I get 500 up and down, same results from a Centos server connected to the FWG.  This has been repeated over and over again.  therefore I’m not putting much stock the cli or the :8883/ss.  

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    http://Firewalla’s IP:8833/ss/ is a local-only test. (So packet only go from your testing device to Firewalla)  It is very likely that you will be pretty high download and upload.  If not, something is not right with your LAN. 

    You will need to check things like

    • If you are using wifi ... it will be slow and depend on where you are at
    • If you are physically wired, make sure the cable is decent.  If you have a switch in between, make sure the switch is decent. 

     

    0
    Comment actions Permalink
  • Avatar
    Ian

    I can confirm that the issue was the 5 year old Mac I was using for the test.... I was able to get over 1000mbps with a newer laptop when directly wired into the FWG.

    0
    Comment actions Permalink

Please sign in to leave a comment.