2degrees UFB 1Gbps connection but only getting 450 + lag spike.

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › 2degrees UFB 1Gbps connection but only getting 450 + lag spike.

1 | 2 | 3 | 4 | 5 | 6

194 posts

Master Geek
+1 received by user: 14

#2196745 12-Mar-2019 20:03

2Degrees & Enable ask me to use iperf to do tests between PCs.

I have e-mail screenshot to them for one of the test but the other not quite sure what that is I will post them here if anyone else can help please explain.

This test was done from my main PC (next to ONT & router) to other end of the house through 3 switches.

This first part of the test I haven't done or rather not sure how to do, maybe someone can help me out here.

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196750 12-Mar-2019 20:17

Another test done from my pfSense router to the PCs at other end of the house using iperf.

Only shows one result, so I have test a few times, all results are the same as below.

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

vulcannz

436 posts

Ultimate Geek
+1 received by user: 136
Inactive user

#2196787 12-Mar-2019 21:18

Testing it on pfsense to directly connected local subnet is unlikely to show anything different as the connection is not going to be stateful (i.e. running across NAT and firewall rules).

If you really wanted to go hard you'd plug a PC into the WAN configured as the pfsenses gateway (non-PPPoE of course) and run the iperf test across the pfsense box. The only problem here is that it wouldn't test the PPPoE dialer component.

Now if you're following my advice so far I'd also recommend dropping your WAN MTU to 1420 and disable fragmentation support. High MTU's are overrated and I always wonder why people are so obsessed with having a 1500 byte MTU. Technically it should not impact local speedtests but then we are talking the internet.

dfnt

1553 posts

Uber Geek
+1 received by user: 1036

Trusted

Lifetime subscriber

#2196797 12-Mar-2019 21:37

I suspect you need to be given a destination IP address to test from the device directly connected to UNI port of the ONT

You could try that 103.x.x.x address in their screenshot to see if it works

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196798 12-Mar-2019 21:38

vulcannz:

Testing it on pfsense to directly connected local subnet is unlikely to show anything different as the connection is not going to be stateful (i.e. running across NAT and firewall rules).

If you really wanted to go hard you'd plug a PC into the WAN configured as the pfsenses gateway (non-PPPoE of course) and run the iperf test across the pfsense box. The only problem here is that it wouldn't test the PPPoE dialer component.

Now if you're following my advice so far I'd also recommend dropping your WAN MTU to 1420 and disable fragmentation support. High MTU's are overrated and I always wonder why people are so obsessed with having a 1500 byte MTU. Technically it should not impact local speedtests but then we are talking the internet.

At this point I would give anything a go tbh, I have dropped WAN MTU to 1420 it does nothing, speeds coming back the same.

What's the fragmentation support? Anything from here is the one you talking about?

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196805 12-Mar-2019 21:44

dfnt:

I suspect you need to be given a destination IP address to test from the device directly connected to UNI port of the ONT

You could try that 103.x.x.x address in their screenshot to see if it works

Done

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

vulcannz

436 posts

Ultimate Geek
+1 received by user: 136
Inactive user

#2196817 12-Mar-2019 22:11

Don't worry about the Do Not Frag option, it's only on some devices.

The iperf result is interesting, because iperf is UDP it's like an 'unloaded' test (no statefulness etc). Can you run a CPU core monitoring graph on your pfsense when you run the iperf? And maybe do the same with a TCP iperf test.

michaelmurfy

meow
13583 posts

Uber Geek
+1 received by user: 10918

Moderator

ID Verified

Trusted

Lifetime subscriber

#2196818 12-Mar-2019 22:12

2degrees supports full 1500 MTU on the PPPoE interface. Not sure on the PFSense box, however, with EdgeOS I'd configure it as the following:

1508 MTU - Ethernet (to ONT) + VLAN.
1500 MTU - PPPoE Dialer.

That does show quite a bit more than what you were getting out of a Speedtest however which is a good sign.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

vulcannz

436 posts

Ultimate Geek
+1 received by user: 136
Inactive user

#2196820 12-Mar-2019 22:13

michaelmurfy:

2degrees supports full 1500 MTU on the PPPoE interface. Not sure on the PFSense box, however, with EdgeOS I'd configure it as the following:

1508 MTU - Ethernet (to ONT) + VLAN.
1500 MTU - PPPoE Dialer.

That does show quite a bit more than what you were getting out of a Speedtest however which is a good sign.

Yeah but full 1500 MTU assumes that PMTU actually works, and as we know it doesn't.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2196821 12-Mar-2019 22:13

What does a TCP test show?

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196829 12-Mar-2019 22:29

vulcannz:

Don't worry about the Do Not Frag option, it's only on some devices.

The iperf result is interesting, because iperf is UDP it's like an 'unloaded' test (no statefulness etc). Can you run a CPU core monitoring graph on your pfsense when you run the iperf? And maybe do the same with a TCP iperf test.

This is about average I have seem from about 10 tests.

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

michaelmurfy

meow
13583 posts

Uber Geek
+1 received by user: 10918

Moderator

ID Verified

Trusted

Lifetime subscriber

#2196834 12-Mar-2019 22:40

@D1NZ OK, that is one overkill router. I now apologise what I made you do earlier on in the thread however was a good test to take SNORT etc out of the loop.

You can get a CPU graph somewhere in the interface (been a while since I used PFSense). Have that running and hammer your connection to ensure it isn't spiking too high.

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196838 12-Mar-2019 22:42

michaelmurfy:

@D1NZ OK, that is one overkill router. I now apologise what I made you do earlier on in the thread however was a good test to take SNORT etc out of the loop.

You can get a CPU graph somewhere in the interface (been a while since I used PFSense). Have that running and hammer your connection to ensure it isn't spiking too high.

All tests it's actully done with Snort and pfBlockerNG all running 😁

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196841 12-Mar-2019 22:56

I notice iperf can actully open few mutli connections.

Problem seems gone away.

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

D1NZ

194 posts

Master Geek
+1 received by user: 14

#2196843 12-Mar-2019 23:00

michaelmurfy:

@D1NZ OK, that is one overkill router. I now apologise what I made you do earlier on in the thread however was a good test to take SNORT etc out of the loop.

You can get a CPU graph somewhere in the interface (been a while since I used PFSense). Have that running and hammer your connection to ensure it isn't spiking too high.

doesn't really show much and I have been try to hammer it with iperf with 20 connections

CPU: Intel Xeon E3-1225 V2 @ 3.20Ghz
RAM: A-data ECC 4GB x 2 1600MHz
SSD: Samsung 840 Pro 120GB
Motherboard: Intel S1200KPR server board mini-ITX
NIC: Intel Ethernet Server Adapter I350-T2

1 | 2 | 3 | 4 | 5 | 6