Slow throughput

[Guest]

[Indiana Horschd]

Hello,

I am quite new to this forum, even though I am using Endian for quite some time now. After having problems with the old hardware, I updated to the Gigabyte GA-Z77X-UD5H mainboard with an i3 and some other stuff. After installing I realized, that the two nic's (Intel 82579V & Atheros 1969:1091) were not recognized by Endian 2.5.1.
Since I installed also a Intel 82541 nic and a Mac USB Lan Adapter, I got it finally working (Gateway with only 1 nic doesn't seemed to work).

Anyway, since a  of days I tried to get the two onboard nic's  without any success. I decided to postpone the Atheros problem since there is no rpm available or at least I haven't found one. Therefore, I tried to update the e1000e driver as well, but for some reason it won't work.
I managed to add the community repo but after the update/upgrade the web access is not working. SSH is still working, and the intel card is still not recognized.

Danoh,
could you please tell me, how you managed to update the driver? Which were the commands you used in the shell?

Thanks for your help.
Indiana Horschd

[Indiana Horschd]

Update:
I finally managed to get the driver updated.
The issue was, that all the drivers are installed under 2.6.32.43-57.e43.i586 but the update was installed under 2.6.32.43-57.e43 and therefore wasn't recognized.
After copying the e1000e.ko file to the right location and adding it to the modprobe.conf I finally see my network card.

Indiana Horschd

[Danoh]

Still having throughput issue.  I'm really loving this community support. Almost 900 views of this thread now and only one person has even bothered to help.

[Danoh]

... 

[harvana]

Did you check "Log accepted outgoing connections" on Firewall menu ?

I guess that efw's file i/o tired up your efw's resource.
I suggest don't check "Log accepted..." and check logfiles on /var/log via SSH.

[Danoh]

Did you check "Log accepted outgoing connections" on Firewall menu ?

I guess that efw's file i/o tired up your efw's resource.
I suggest don't check "Log accepted..." and check logfiles on /var/log via SSH.

It's not checked and outgoing fw is not enabled.

There's no I/O issue that I can tell. This box has plenty of resources and fast drives.

[Danoh]

bump..... 

[Ricard]

I have checked these speeds starting from 38.70 down / 2.14 up without Endian.  I have two Intel 82574L (e1000e drv.) + Atom d2500 + SSD

It has been checked two times each one, with enough time between them.
- Snort (all rules) + Proxy (transparent) + IPS (in zones and Outgoing Firewall) + Outgoing Firewall (HTTP/s, DNS)
- Log active for Snort, Firewall and Proxy

1- Snort On + Proxy On + IPS On + Firewall On:  (11.24 - 2.08)
2- Snort On + Proxy Off + IPS On + Firewall On:  (24.47- 2.12)
3- Snort Off + Proxy On + IPS Off + Firewall On: (26.44 - 2.12)
4- Snort Off + Proxy Off + IPS On + Firewall On:  (37.32- 2.12)
5- Snort Off + Proxy Off + IPS On + Firewall Off:  (38.21- 2.12)
6- Snort Off + Proxy Off + IPS Off + Firewall Off:  (24.16 - 2.15) (I don't understand this. I had repeated 4 times)

Also, it seems the Snort causes a good delay when I check more than 2 rules.  Perhaps it depends of my hardware, I'm not sure..

[cocoalcazar]

Prueba con esto, a mi me funciono:

With this fix . . . .

nano /usr/lib/efw/dansguardian/default/settings
change the values as below:

MAXCHILDREN=500
MINCHILDREN=128
MINSPARECHILDREN=32
PREFORKCHILDREN=16
MAXSPARECHILDREN=256
MAXAGECHILDREN=10000


Also if you are facing slow browsing issue change the following values:

nano /var/efw/havp/settings

change 2 values as below

MAXSERVERS=150
SERVERNUMBER=50


I have a efw  running 500 users through a 10mbit fiber connection with the above settings modified.

[Alphamale]

I have EFW 3.0 and that directories doesnt exists. How i can do that in this version?
Sorry for my english, thanks.

[gwpotter]

Danoh,
I have two efw 2.5.1 boxes at two separate locations. One has full throughput the other had extremely slow throughput.
Swapped nics, ram, cables no change
Turned off all proxys and outgoing firewall and that solved it for me.
I am still testing turning things back on to pinpoint it. If I find anything else I will post

[sota]

Danoh,

Is your outgoing firewall enabled? I have found that it limits my throughput to a max of ~20MBS.

[juddyjacob]

If you are having an issue locating the files just type

find / -name havp

it will show you all instances of folders and files named havp

[karamanr]

I'm sorry to hear you have so many issues. I have noticed similar issues few times but swapping NIC did help. In your case that does not seems to work. I would suggest that you give a pfsense a try. It is bsd based and very robust firewall with more features than endian and any other firewall and performance is unmatched by any firewall distro.
If you do not need  feature reach firewall you can try IPFire which is also very good open source firewall similar features as endian but performance is a bit better. I hate the GUI with this distro though.

good luck

[pkonderla]

EFW 3.0.5

WITHOUT transparent proxy all looks good.

But when enabled, download  ~5,34MB = ~40Mbit/s per single download - stream is quite stable, just litle fluctuation. Can run multiple downloads - all runs at 40Mbit/s (did try 3x at the same time).

No others (related) services enabled (QoS, Nagios, etc...)

There must be some settings in Squid or c-icap !!! - 40Mbit can't be

btw: does some developer reading this threads?


hw:
Intel(R) Celeron(R) CPU 1037U @ 1.80GHz
Intel Corporation 82583V Gigabit Network Connection
2GB DDR3
SSD HDD