|
Post by bittwiddler on Dec 17, 2020 0:39:45 GMT
Hello SmallWall Gurus,
I am seeing very interesting behavior on one of my networks. I am running SmallWall in front of a Netgear ProSafe switch and a couple of APs. One AP is Ubiquity and the other is Cisco running DDWRT.
The behavior is that 4-5 users who are running different Linux distros all have trouble with web browsing. They can navigate to a web page but after interacting with the page for 60-90 seconds the page becomes unresponsive and eventually hangs. Both Firefox and Chrome respond identically. There are dozens of Windows users on that network and they never have an issue. I have also noticed that sometimes Signal messages will not send on Android phones when connected to the network. When disconnected they send immediately.
If the Linux users connect to a wireless hot-spot on my phone (for testing purposes only!) they are able to surf the web without incident. The only common theme is Smallwall. I have connected both APs directly to my SmallWall appliance and eliminated the switch - same behaviour. I would love to hear thoughts on debugging this. I have run a number of Wireshark and Fiddler traces without seeing anything obvious.
All the best!
|
|
|
Post by Lee Sharp on Dec 17, 2020 3:23:44 GMT
What hardware is smallwall running on?
|
|
|
Post by bittwiddler on Dec 17, 2020 18:45:19 GMT
This particular instance is running on Soekris net4801. I could move it to an MITXPC box without too much hassle.
|
|
|
Post by Lee Sharp on Dec 17, 2020 23:28:28 GMT
The Soekris is a bit under powered for modern internet speeds. That may be the cause of your problem. To get gigabit speeds, you actually need 3rd of 4th gen core I architecture. (Not CPU, but chipset) So, yes, I would try better hardware first just to be sure.
|
|
|
Post by bittwiddler on Dec 17, 2020 23:40:18 GMT
I agree it is under powered. The CPU and Memory values show it is not breathing hard though. I would expect Windows and Linux to suffer the same fate if it was purely hardware (I admit non-Intel NICs may give me pause on the hardware side).
I'll try my MITXPC box and I may also try one of my super-duper boxes running OPNSense for grins if that doesn't work. This has had me baffled for a while now and I am just now getting round to enough spare time to dig in deeper.
|
|
|
Post by Lee Sharp on Dec 18, 2020 0:14:20 GMT
It is not the CPU that is the problem but the buss and just pushing around the bits quickly. You can slam into the data speed limit and still have a mostly idle CPU.
|
|
|
Post by bittwiddler on Dec 18, 2020 0:51:58 GMT
Fair enough. I'll try my fancy, new celeron j1900 Processor Quad core 2 GHz box out for size.
|
|
|
Post by Lee Sharp on Dec 18, 2020 2:11:21 GMT
Should do a bit better.  Things will really get fun when we have to do multi-gig!
|
|