Re: [pfSense] pfsense really slow
I saw something similar once after an upgrade, installing packages, when pfSense's DNS wasn't running. Linux doesn't really do a round-robin or last-known-good DNS search, it just keeps trying the failing ones. I don't recall noticing it on the main screen though. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Robison, Dave Sent: Friday, September 2, 2016 5:40 PM To: list@lists.pfsense.org Subject: Re: [pfSense] pfsense really slow Figured it out. Had to enter a few hosts into the local DNS resolver, including a CNAME for one of our LDAP authentication servers. The delay was DNS waiting to time out/fail on the local DNS records before pointing off to our other, canonical, internal DNS servers. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense really slow
Figured it out. Had to enter a few hosts into the local DNS resolver, including a CNAME for one of our LDAP authentication servers. The delay was DNS waiting to time out/fail on the local DNS records before pointing off to our other, canonical, internal DNS servers. Thanks again for the responses. -- Dave Robison Senior Business Systems Analyst FIS Banking Solutions 510/621-2089 (w) 530/518-5194 (c) 510/621-2020 (f) da...@vicor.com david.robi...@fisglobal.com _ The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense really slow
Thanks for the responses folks. I'm using Western Digital 1TB black drives connected to an LSI MegaRaid card. I use this setup extensively with FreeBSD on systems ranging, at the moment, from 8.1 to 11.0-RC2. I don't experience this type of slowdown on other systems. Load is nil: [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: uptime 12:33PM up 8 days, 20:01, 2 users, load averages: 0.00, 0.00, 0.00 [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: swapinfo Device 1K-blocks UsedAvail Capacity /dev/label/swap0 335544280 33554428 0% [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: Here's some hardware details: [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: dmesg | grep mfi | head -n 4 mfi0: mem 0xb8b0-0xb8b0,0xb890-0xb891 irq 18 at device 14.0 on pci4 mfi0: Using MSI mfi0: Megaraid SAS driver Ver 4.23 mfi0: FW MaxCmds = 1008, limiting to 128 [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: mfiutil show drives mfi0 Physical Drives: 26 ( 932G) ONLINE SATA E1:S0 27 ( 932G) ONLINE SATA E1:S1 [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: mfiutil show battery mfi0: Battery State: Manufacture Date: 10/30/2009 Serial Number: 887 Manufacturer: LS001A Model: 3598501 Chemistry: LION Design Capacity: 1215 mAh Full Charge Capacity: 62950 mAh Current Capacity: 61009 mAh Charge Cycles: 1231 Current Charge: 97% Design Voltage: 3700 mV Current Voltage: 3988 mV Temperature: 24 C Autolearn period: 30 days Next learn time: Tue Sep 6 01:11:33 2016 Learn delay interval: 0 hours Autolearn mode: enabled Status: LEARN_CYCLE_REQUESTED [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: mfiutil cache mfid0 mfi0 volume mfid0 cache settings: I/O caching: disabled write caching: write-back write cache with bad BBU: enabled read ahead: none drive write cache: enabled [2.3.1-RELEASE][r...@pfsense.vicor.com]/root: On 09/02/2016 08:04, compdoc wrote: >> though the web interface is incredibly slow. > > I think I remember that if your CPU doesn't support a certain built-in > feature, the gui can be slow. > > But then it could be something else. Is cpu use high? > > > ___ > pfSense mailing list > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.pfsense.org_mailman_listinfo_list&d=BQICAg&c=3BfiSO86x5iKjpl2b39jud9R1NrKYqPq2js90dwBswk&r=xejns4hCLY4pkxk_Fns5Pg&m=RTodpaPSj9S0aRTrROdiSa4KWFcl4wPVtScGnOpNV_Y&s=QuQxXctLjx0pn2HL8Cxzj0oiUpH8IWo07W6B8th6lJc&e= > > Support the project with Gold! > https://urldefense.proofpoint.com/v2/url?u=https-3A__pfsense.org_gold&d=BQICAg&c=3BfiSO86x5iKjpl2b39jud9R1NrKYqPq2js90dwBswk&r=xejns4hCLY4pkxk_Fns5Pg&m=RTodpaPSj9S0aRTrROdiSa4KWFcl4wPVtScGnOpNV_Y&s=UBm9plxTzJ8dOls5IphGoEQgpg5sUtgawZknfjZVGBg&e= > > -- Dave Robison Senior Business Systems Analyst FIS Banking Solutions 510/621-2089 (w) 530/518-5194 (c) 510/621-2020 (f) da...@vicor.com david.robi...@fisglobal.com _ The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense really slow
>though the web interface is incredibly slow. I think I remember that if your CPU doesn't support a certain built-in feature, the gui can be slow. But then it could be something else. Is cpu use high? ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense really slow
On Thu, Sep 1, 2016 at 6:26 PM, Robison, Dave wrote: > Hiya, > > Recently set up a pfsense box and it works great, very happy with the > functionality, though the web interface is incredibly slow. Wondering if this > is normal or if there's something wrong with my setup. > > Going from the dashboard to Firewall > Rules takes 25-30 seconds. > > I know that nginx and pf aren't very cpu or memory intensive, and php isn't > perfect but it's fairly quick, so I'm not sure what makes this box so slow to > respond. > > Here's the first few lines of dmesg: > > FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 > > root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense > amd64 > FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512 > CPU: Intel(R) Xeon(R) CPU5150 @ 2.66GHz (2660.05-MHz K8-class > CPU) > Origin="GenuineIntel" Id=0x6f6 Family=0x6 Model=0xf Stepping=6 > > Features=0xbfebfbff > > Features2=0x4e3bd > AMD Features=0x20100800 > AMD Features2=0x1 > VT-x: (disabled in BIOS) HLT,PAUSE > TSC: P-state invariant, performance statistics > real memory = 10737418240 (10240 MB) > avail memory = 10313097216 (9835 MB) > Event timer "LAPIC" quality 400 > ACPI APIC Table: > FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs > FreeBSD/SMP: 1 package(s) x 2 core(s) > cpu0 (BSP): APIC ID: 0 > cpu1 (AP): APIC ID: 1 > > Any related thoughts are appreciated. > > > -- > Dave Robison > Senior Business Systems Analyst > FIS Banking Solutions > 510/621-2089 (w) > 530/518-5194 (c) > 510/621-2020 (f) > da...@vicor.com > david.robi...@fisglobal.com > > _ > The information contained in this message is proprietary and/or confidential. > If you are not the intended recipient, please: (i) delete the message and all > copies; (ii) do not disclose, distribute or use the message in any manner; > and (iii) notify the sender immediately. In addition, please be aware that > any message addressed to our domain is subject to archiving and review by > persons other than the intended recipient. Thank you. > ___ No, it is not supposed to do that. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] pfsense really slow
What's the drive being used? Suggest to move it to SSD, probably, samsung Evo pro 850 On 02-Sep-2016 18:36, "Robison, Dave" wrote: > Hiya, > > Recently set up a pfsense box and it works great, very happy with the > functionality, though the web interface is incredibly slow. Wondering if > this is normal or if there's something wrong with my setup. > > Going from the dashboard to Firewall > Rules takes 25-30 seconds. > > I know that nginx and pf aren't very cpu or memory intensive, and php > isn't perfect but it's fairly quick, so I'm not sure what makes this box so > slow to respond. > > Here's the first few lines of dmesg: > > FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT > 2016 > root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/ > builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense amd64 > FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512 > CPU: Intel(R) Xeon(R) CPU5150 @ 2.66GHz (2660.05-MHz K8-class > CPU) > Origin="GenuineIntel" Id=0x6f6 Family=0x6 Model=0xf Stepping=6 > Features=0xbfebfbff APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI, > MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE> > Features2=0x4e3bd CX16,xTPR,PDCM,DCA> > AMD Features=0x20100800 > AMD Features2=0x1 > VT-x: (disabled in BIOS) HLT,PAUSE > TSC: P-state invariant, performance statistics > real memory = 10737418240 (10240 MB) > avail memory = 10313097216 (9835 MB) > Event timer "LAPIC" quality 400 > ACPI APIC Table: > FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs > FreeBSD/SMP: 1 package(s) x 2 core(s) > cpu0 (BSP): APIC ID: 0 > cpu1 (AP): APIC ID: 1 > > Any related thoughts are appreciated. > > > -- > Dave Robison > Senior Business Systems Analyst > FIS Banking Solutions > 510/621-2089 (w) > 530/518-5194 (c) > 510/621-2020 (f) > da...@vicor.com > david.robi...@fisglobal.com > > _ > The information contained in this message is proprietary and/or > confidential. If you are not the intended recipient, please: (i) delete the > message and all copies; (ii) do not disclose, distribute or use the message > in any manner; and (iii) notify the sender immediately. In addition, please > be aware that any message addressed to our domain is subject to archiving > and review by persons other than the intended recipient. Thank you. > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
[pfSense] pfsense really slow
Hiya, Recently set up a pfsense box and it works great, very happy with the functionality, though the web interface is incredibly slow. Wondering if this is normal or if there's something wrong with my setup. Going from the dashboard to Firewall > Rules takes 25-30 seconds. I know that nginx and pf aren't very cpu or memory intensive, and php isn't perfect but it's fairly quick, so I'm not sure what makes this box so slow to respond. Here's the first few lines of dmesg: FreeBSD 10.3-RELEASE-p3 #1 3ef16fb(RELENG_2_3_1): Tue May 17 19:34:13 CDT 2016 root@ce23-amd64-builder:/builder/pfsense-231/tmp/obj/builder/pfsense-231/tmp/FreeBSD-src/sys/pfSense amd64 FreeBSD clang version 3.4.1 (tags/RELEASE_34/dot1-final 208032) 20140512 CPU: Intel(R) Xeon(R) CPU5150 @ 2.66GHz (2660.05-MHz K8-class CPU) Origin="GenuineIntel" Id=0x6f6 Family=0x6 Model=0xf Stepping=6 Features=0xbfebfbff Features2=0x4e3bd AMD Features=0x20100800 AMD Features2=0x1 VT-x: (disabled in BIOS) HLT,PAUSE TSC: P-state invariant, performance statistics real memory = 10737418240 (10240 MB) avail memory = 10313097216 (9835 MB) Event timer "LAPIC" quality 400 ACPI APIC Table: FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 1 package(s) x 2 core(s) cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 1 Any related thoughts are appreciated. -- Dave Robison Senior Business Systems Analyst FIS Banking Solutions 510/621-2089 (w) 530/518-5194 (c) 510/621-2020 (f) da...@vicor.com david.robi...@fisglobal.com _ The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold