Internet through Untangle is slow

[mhamilton]

Hello,

I've searched this topic and noticed that it may have to do something with the apps installed, so I disabled all of them and still it doesn't seem to help. I have the latest Untangle and no access to ssh (yet).

I have an 10mb down/10mb up internet connection from an ISP going into Untangle. And then from Untangle it's being distributed via 10/100 switch. When I run speedtest.net from any of the workstations connected to the switch, I get results of 3-4mb download and 2-4mb upload.

However, when I connect a laptop to the modem directly and do the speedtest - the speed shows as 9-10mb download and 9-10mb upload as it should.

What gives?

[jcoehoorn]

I don't doubt you are having a performance issue somewhere, but the speedtest results are meaningless. You will never see the full throughput of your connection even if you had a perfect box, because you're sharing that connection with others. You have 10Mbit to allocate among everyone at your site, not 10Mbit each. When you connect a laptop directly to the connection, you're the only one on the network.

Again, I don't doubt you have a problem... it's just that we need a better tool than speedtest for the diagnosis.

Are you using attack blocker? If so, what are your top scores? If not, what happens if you turn it on? Do you have the bandwidth control or application control apps? What are the specs on the box? Is it possible anyone at your location is using bittorrent? What is your speedtest result if you add a bypass rule for the IP of your laptop?

[mhamilton]

Thanks for your reply.
I understand what you're saying about the speedtest.. so there needs to be another form of speedtest that's more reliable.

Next thing is, the Attack Blocker. I've seen the mention of it before when I searched, and I had it turned on yesterday. All the Attacks were blocked internally from one of the workstations and that's about it. I shut off the AB and we're still having issues. All other apps are shut off as stated previously.

I've done bypass and the speedtest is the same.
Specs are:

Intel Xeon 5345 Quad, 2.33Ghz
4GB RAM
Load: 0.13,0.13,0.9

[sky-knight]

The attack blocker is a traffic cop that controls network sessions. It simply makes everyone transiting the Untangle play nice with network resources. It will interfere with raw performance tests, but it should be turned on for any production Untangle.

Open up the terminal and run the following command.

/etc/init.d/untangle-vm stop

Then run speedtest.net's test and record the results.

/etc/init.d/untangle-vm start

Then run it again.

If both numbers come out roughly the same, you've either got something on your network sucking up the bandwidth, or something with your hardware that is slowing things down. My experience here says in your case you're likely dealing with crappy network interfaces. But you haven't listed them, so I can't rule them out. If the first number is higher than the second number, then you've got something in the untangle rack that is causing the slowdown, likely QoS.

[mhamilton]

Thanks Rob.
I'm gonna redo the speedtest and also give you the interfaces.

QoS isn't running btw.
Regarding the hardware, everything is set to full-duplex.

The attack blocker is a traffic cop that controls network sessions. It simply makes everyone transiting the Untangle play nice with network resources. It will interfere with raw performance tests, but it should be turned on for any production Untangle.

Open up the terminal and run the following command.

/etc/init.d/untangle-vm stop

Then run speedtest.net's test and record the results.

/etc/init.d/untangle-vm start

Then run it again.

If both numbers come out roughly the same, you've either got something on your network sucking up the bandwidth, or something with your hardware that is slowing things down. My experience here says in your case you're likely dealing with crappy network interfaces. But you haven't listed them, so I can't rule them out. If the first number is higher than the second number, then you've got something in the untangle rack that is causing the slowdown, likely QoS.

[sky-knight]

Duplex settings are irrelevant, certain cheap network interfaces just can't keep up with the load of being a router. That said, your test numbers don't seem to match that pattern. So I'm thinking you've either got a bug on your network that's DOS'ing your LAN, or you've got a setting somewhere that's killing it.

[mhamilton]

I'm waiting to hear back from the guy who set it up for the password of the terminal as all the ones I currently have aren't working.

Once that's here, I can give you the interfaces.
Meanwhile, is there any PCIE card(s) that you can recommend for this?

[L3T]

What are the average cpu loads and free memory.

Also how free is the hard drive?

[mhamilton]

Total disk space, 480GB
Total used space, 472GB

Load averages up above.

[mhamilton]

Interfaces for you Rob.

05:00.0 Ethernet controller: Broadcom Corporation NetXtreme II BCM5708 Gigabit Ethernet (rev 12)
09:00.0 Ethernet controller: Broadcom Corporation NetXtreme II BCM5708 Gigabit Ethernet (rev 12)
0c:00.0 Ethernet controller: Intel Corporation 82571EB Gigabit Ethernet Controller (rev 06)
0c:00.1 Ethernet controller: Intel Corporation 82571EB Gigabit Ethernet Controller (rev 06)

Currently, I have one PCIE (Not sure if it's the Intel one or the Broadcom, although Broadcom might be the onboard one judging by the Untangle compatible list)

The onboard has two ports, one takes in the WAN, and the other goes to the LAN.
The PCIE NIC takes in WAN#2 (which at the moment is disconnected just so we can troubleshoot)

Going to test by directly connecting to the LAN port in a few hours on the server to see if it's a port issue. But till then, this is what I got.