Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6
Affiliate link
 
 
 

Affiliate link: Buy anything now at AliExpress.
D1NZ

194 posts

Master Geek


  #2196745 12-Mar-2019 20:03
Send private message

2Degrees & Enable ask me to use iperf to do tests between PCs.

 

I have e-mail screenshot to them for one of the test but the other not quite sure what that is I will post them here if anyone else can help please explain.

 

This test was done from my main PC (next to ONT & router) to other end of the house through 3 switches.

 

 

 

 

This first part of the test I haven't done or rather not sure how to do, maybe someone can help me out here.

 


D1NZ

194 posts

Master Geek


  #2196750 12-Mar-2019 20:17
Send private message

Another test done from my pfSense router to the PCs at other end of the house using iperf.

 

Only shows one result, so I have test a few times, all results are the same as below.

 

 

 

 

 


vulcannz
436 posts

Ultimate Geek
Inactive user


  #2196787 12-Mar-2019 21:18
Send private message

Testing it on pfsense to directly connected local subnet is unlikely to show anything different as the connection is not going to be stateful (i.e. running across NAT and firewall rules).

 

If you really wanted to go hard you'd plug a PC into the WAN configured as the pfsenses gateway (non-PPPoE of course) and run the iperf test across the pfsense box. The only problem here is that it wouldn't test the PPPoE dialer component.

 

Now if you're following my advice so far I'd also recommend dropping your WAN MTU to 1420 and disable fragmentation support. High MTU's are overrated and I always wonder why people are so obsessed with having a 1500 byte MTU. Technically it should not impact local speedtests but then we are talking the internet.




dfnt
1389 posts

Uber Geek

Lifetime subscriber

  #2196797 12-Mar-2019 21:37
Send private message

I suspect you need to be given a destination IP address to test from the device directly connected to UNI port of the ONT

 

You could try that 103.x.x.x address in their screenshot to see if it works


D1NZ

194 posts

Master Geek


  #2196798 12-Mar-2019 21:38
Send private message

vulcannz:

 

Testing it on pfsense to directly connected local subnet is unlikely to show anything different as the connection is not going to be stateful (i.e. running across NAT and firewall rules).

 

If you really wanted to go hard you'd plug a PC into the WAN configured as the pfsenses gateway (non-PPPoE of course) and run the iperf test across the pfsense box. The only problem here is that it wouldn't test the PPPoE dialer component.

 

Now if you're following my advice so far I'd also recommend dropping your WAN MTU to 1420 and disable fragmentation support. High MTU's are overrated and I always wonder why people are so obsessed with having a 1500 byte MTU. Technically it should not impact local speedtests but then we are talking the internet.

 

 

 

 

At this point I would give anything a go tbh, I have dropped WAN MTU to 1420 it does nothing, speeds coming back the same.

 

What's the fragmentation support? Anything from here is the one you talking about?

 

 

 

 

 


D1NZ

194 posts

Master Geek


  #2196805 12-Mar-2019 21:44
Send private message

dfnt:

 

I suspect you need to be given a destination IP address to test from the device directly connected to UNI port of the ONT

 

You could try that 103.x.x.x address in their screenshot to see if it works

 

 

 

 

Done

 

 

 


vulcannz
436 posts

Ultimate Geek
Inactive user


  #2196817 12-Mar-2019 22:11
Send private message

Don't worry about the Do Not Frag option, it's only on some devices.

 

The iperf result is interesting, because iperf is UDP it's like an 'unloaded' test (no statefulness etc). Can you run a CPU core monitoring graph on your pfsense when you run the iperf? And maybe do the same with a TCP iperf test.




michaelmurfy
/dev/ttys0
10981 posts

Uber Geek

Moderator
ID Verified
Trusted
Lifetime subscriber

  #2196818 12-Mar-2019 22:12
Send private message

2degrees supports full 1500 MTU on the PPPoE interface. Not sure on the PFSense box, however, with EdgeOS I'd configure it as the following:

 

1508 MTU - Ethernet (to ONT) + VLAN.
1500 MTU - PPPoE Dialer.

 

That does show quite a bit more than what you were getting out of a Speedtest however which is a good sign.





Michael Murphy | https://murfy.nz | https://keybase.io/michaelmurfy - Referral Links: Sharesies | Electric Kiwi
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation.


vulcannz
436 posts

Ultimate Geek
Inactive user


  #2196820 12-Mar-2019 22:13
Send private message

michaelmurfy:

 

2degrees supports full 1500 MTU on the PPPoE interface. Not sure on the PFSense box, however, with EdgeOS I'd configure it as the following:

 

1508 MTU - Ethernet (to ONT) + VLAN.
1500 MTU - PPPoE Dialer.

 

That does show quite a bit more than what you were getting out of a Speedtest however which is a good sign.

 

 


Yeah but full 1500 MTU assumes that PMTU actually works, and as we know it doesn't. 


sbiddle
30853 posts

Uber Geek

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #2196821 12-Mar-2019 22:13
Send private message

What does a TCP test show?


D1NZ

194 posts

Master Geek


  #2196829 12-Mar-2019 22:29
Send private message

vulcannz:

 

Don't worry about the Do Not Frag option, it's only on some devices.

 

The iperf result is interesting, because iperf is UDP it's like an 'unloaded' test (no statefulness etc). Can you run a CPU core monitoring graph on your pfsense when you run the iperf? And maybe do the same with a TCP iperf test.

 

 

 

 

This is about average I have seem from about 10 tests.

 


michaelmurfy
/dev/ttys0
10981 posts

Uber Geek

Moderator
ID Verified
Trusted
Lifetime subscriber

  #2196834 12-Mar-2019 22:40
Send private message

@D1NZ OK, that is one overkill router. I now apologise what I made you do earlier on in the thread however was a good test to take SNORT etc out of the loop.

 

You can get a CPU graph somewhere in the interface (been a while since I used PFSense). Have that running and hammer your connection to ensure it isn't spiking too high.





Michael Murphy | https://murfy.nz | https://keybase.io/michaelmurfy - Referral Links: Sharesies | Electric Kiwi
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation.


D1NZ

194 posts

Master Geek


  #2196838 12-Mar-2019 22:42
Send private message

michaelmurfy:

 

@D1NZ OK, that is one overkill router. I now apologise what I made you do earlier on in the thread however was a good test to take SNORT etc out of the loop.

 

You can get a CPU graph somewhere in the interface (been a while since I used PFSense). Have that running and hammer your connection to ensure it isn't spiking too high.

 

 

 

 

All tests it's actully done with Snort and pfBlockerNG all running 😁


D1NZ

194 posts

Master Geek


  #2196841 12-Mar-2019 22:56
Send private message

I notice iperf can actully open few mutli connections.

 

Problem seems gone away.

 


D1NZ

194 posts

Master Geek


  #2196843 12-Mar-2019 23:00
Send private message

michaelmurfy:

 

@D1NZ OK, that is one overkill router. I now apologise what I made you do earlier on in the thread however was a good test to take SNORT etc out of the loop.

 

You can get a CPU graph somewhere in the interface (been a while since I used PFSense). Have that running and hammer your connection to ensure it isn't spiking too high.

 

 

doesn't really show much and I have been try to hammer it with iperf with 20 connections

 


1 | 2 | 3 | 4 | 5 | 6
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

D-Link G415 4G Smart Router Review
Posted 27-Jun-2022 17:24


New Zealand Video Game Sales Reaches $540 Million
Posted 26-Jun-2022 14:49


Github Copilot Generally Available to All Developers
Posted 26-Jun-2022 14:37


Logitech G Introduces the New Astro A10 Headset
Posted 26-Jun-2022 14:20


Fitbit introduces Sleep Profiles
Posted 26-Jun-2022 14:11


Synology Introduces FlashStation FS3410
Posted 26-Jun-2022 14:04


Intel Arc A380 Graphics First Available in China
Posted 15-Jun-2022 17:08


JBL Introduces PartyBox Encore Essential Speaker
Posted 15-Jun-2022 17:05


New TVNZ+ streaming brand launches
Posted 13-Jun-2022 08:35


Chromecast With Google TV Review
Posted 10-Jun-2022 17:10


Xbox Gaming on Your Samsung Smart TV No Console Required
Posted 10-Jun-2022 00:01


Xbox Cloud Gaming Now Available in New Zealand
Posted 10-Jun-2022 00:01


HP Envy Inspire 7900e Review
Posted 9-Jun-2022 20:31


Philips Hue Starter Kit Review
Posted 4-Jun-2022 11:10


Sony Expands Its Wireless Speaker X-series Range
Posted 4-Jun-2022 10:25









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.