Internet too slow to untangle connected

[arthurbovolon]

Hello Team!

We last few days I am facing a very large slowdowns on the Internet. Many users are complaining here on business a lot!
To see if the speed improved, restarted the Untangle, and noticed that when he is restarting, the internet comes back very quickly!
To give you an idea, I have a link to 20M. Under normal conditions using the speedtest.net site, conducting tests with servers near my locality, my ping results are in the range of 20 ~ 50ms and speed of 15M ~ 19M. However right now my ping on the same server is in the range of 200 ~ 400ms and speeds of 1 ~ 5M.
I performed exhaustive tests and could conclude that when the Untangle this on the internet is extremely slow when restarting it, everything is fast!

Have you performed the test connect a laptop directly on the link, and the speed is excellent but with Untangle on this horrible.
Another test I did was put my workstation in "bypass" but had different results.
And as I said, these problems started about two days.

Below two images, with the first and second Untangle connected with it restarting.




I ask the help of the team with any suggestions of what else I can test so that we can together find the cause and solve this problem.

Sorry for my english.

[joemailey]

How many users are on your network?

What is the spec of your untangle server?

Are any users doing any sort of downloading?

Almost sounds like a user is flooding untangle and slowing it down.

[sky-knight]

Speedtest.net is one of the worst possible tests for actual speed. I don't doubt you're having an issue, but you likely need to do something very different to solve your problem.

For example, what apps are you running? If attack blocker isn't there, it should be, and if it is, have you looked at the reputation scores?

[dmorris]

I'd check the usual suspects:

QoS
MTU setting
duplex setting
Bandwidth Control configuration

[arthurbovolon]

Thanks for the feedback, we will solve it.

Below the answer to the questions

How many users are on your network?
maximum of 50 users

What is the spec of your untangle server?
Core 2 Duo E2200
4GB memory
HD 80GB

Are any users doing any sort of downloading?
Most users only access websites of our clients, the rest is blocked.
Yet I monitored through the Bandwidth Monitor to see if someone was causing the slowness.

Almost sounds like a user is flooding untangle and slowing it down.

[arthurbovolon]

Yes, I know the speedtest is not the most suitable for this, but only used as a parameter to illustrate for you. Also tested through a download a disk image hosted on sourceforge.net and the result was the same. But anyway, let's answer the questions:

The apps I'm using here:
- Webfilter
- Virus blocker
- Spyware blocker
- Web Cache
- Bandwidtch Control
- Application Control
- Firewall
- Intrusion Prevent
- Ad Blocker

Services:
- Reports
- Policy Manager
- Directory Connector
- Wan Failover
- Wan Balancer
- Captive Portal
- Attack Blocker
- Configuration Backup
- Branding Manager
- Live Support

Right now the Attack Blocker like this:
Sessions accepted 179325
Sessions limited 6486
Sessions dropped 1288
Sessions rejected 0

Speedtest.net is one of the worst possible tests for actual speed. I don't doubt you're having an issue, but you likely need to do something very different to solve your problem.

For example, what apps are you running? If attack blocker isn't there, it should be, and if it is, have you looked at the reputation scores?

[arthurbovolon]

Hello Dmorris,

Here I do not use QoS because until then it was not necessary, because we use only http access to sites. We do not have any VoIP or video conferencing service or something.
MTU = 1500
Duplex = auto / full
bandwidtch control is configured to prioritize dns, imap, pop, and access to the websites of our clients

I'd check the usual suspects:

QoS
MTU setting
duplex setting
Bandwidth Control configuration

[dmorris]

If bandwidth control is configured, then you are using QoS.
What have you set your QoS limits to?

seems unlikely to be that anyway, if your ping is that slow something more fundamental is probably wrong.

[sky-knight]

Get on the machine's terminal, and run ifconfig. Check the output for errors, that will tell you if you have a media / MTU issue.

Beyond that, check your attack blocker logs and start looking at IP addresses with reputation scores over 100 points. You may have a virus or something on the network that's DOS'ing Untangle from within.

Finally, you didn't list what interfaces you're using. All NICS are not created equal and certain cards are notorious for random performance issues. If they aren't Intel, or Broadcom based, that can be your problem as well.

[arthurbovolon]

Hello!
Today I spent the day monitoring the internet and Untangle. In the morning, when I wrote the answer for you, the internet was optimal and low ping. During the whole day was like that. However today at 5 pm, the users reported that they started slow, just like yesterday. That is, I could check that the slowness occurs always at the same time, ie in late afternoon.
I have no routine that is performed on this hazard, a task network or something.
An additional, I started having these problems after upgrading from version 9.2 of Untangle for 9.3.1. Will may have something to do, or was it just coincidence?

Tomorrow I will get up early the information I asked for.